View as .md

Django (django-allauth)

See the Applications overview for prerequisites, configuration endpoints, and available scopes.

django-allauth provides OpenID Connect support for Django. Key configuration:

  • Install django-allauth[openid_connect]
  • Set oauth_pkce_enabled: True and fetch_userinfo: True in SOCIALACCOUNT_PROVIDERS
  • Use server_url (not issuer) in provider settings
  • Callback URL: /accounts/oidc/vouch/login/callback/
  • Hardware attestation claims (hardware_verified, hardware_aaguid) are in the access token JWT — decode the payload to read them

Example

web/django-allauth — Complete working example with django-allauth OIDC provider, PKCE, and hardware claim extraction.