Convert Usage to Google OIDC

app/auth.py

@@ -4,7 +4,7 @@ import logging
 logger = logging.getLogger(__name__)
 
 
-SCOPES = "openid email profile attributes"
+SCOPES = "openid email profile"
 
 
 def get_authorization_url(config: AppConfig, state: str) -> str:
@@ -16,14 +16,14 @@ def get_authorization_url(config: AppConfig, state: str) -> str:
         "state": state,
     }
     query = "&".join(f"{k}={v}" for k, v in params.items())
-    url = f"{config.authentik_host}/application/o/authorize/?{query}"
+    url = f"https://accounts.google.com/o/oauth2/auth?{query}"
     logger.info("Authorization URL: %s", url)
     return url
 
 async def exchange_code_for_token(config: AppConfig, code: str) -> dict:
     async with httpx.AsyncClient() as client:
         response = await client.post(
-            f"{config.authentik_host}/application/o/token/",
+            f"https://oauth2.googleapis.com/token",
             data={
                 "grant_type": "authorization_code",
                 "code": code,
@@ -39,7 +39,7 @@ async def exchange_code_for_token(config: AppConfig, code: str) -> dict:
 async def get_userinfo(config: AppConfig, access_token: str) -> dict:
     async with httpx.AsyncClient() as client:
         response = await client.get(
-            f"{config.authentik_host}/application/o/userinfo/",
+            f"https://www.googleapis.com/oauth2/v1/userinfo?alt=json",
             headers={"Authorization": f"Bearer {access_token}"},
         )
         response.raise_for_status()