Fix B2C edit-profile and reset-password links

Author: rayluo

.env.sample.b2c

@@ -4,6 +4,6 @@ CLIENT_ID=<client id>
 CLIENT_SECRET=<client secret>
 # Expects the display name such as "contoso"
 TENANT_NAME=<tenant name>
-SIGNUPSIGNIN_USER_FLOW=B2C_1_profile_editing
-EDITPROFILE_USER_FLOW=B2C_1_reset_password
-RESETPASSWORD_USER_FLOW=B2C_1_signupsignin1
+SIGNUPSIGNIN_USER_FLOW=B2C_1_signupsignin1
+EDITPROFILE_USER_FLOW=B2C_1_profile_editing
+RESETPASSWORD_USER_FLOW=B2C_1_reset_password

app.py

@@ -19,6 +19,7 @@
 from werkzeug.middleware.proxy_fix import ProxyFix
 app.wsgi_app = ProxyFix(app.wsgi_app, x_proto=1, x_host=1)
 
+app.jinja_env.globals.update(Auth=identity.web.Auth) # Useful in template for B2C
 auth = identity.web.Auth(
  session=session,
  authority=app.config["AUTHORITY"],

templates/index.html

@@ -14,7 +14,7 @@ <h2>Welcome {{ user.get("name") }}!</h2>
  {% endif %}
 
  {% if config.get("B2C_PROFILE_AUTHORITY") %}
- <li><a href='{{config.get("B2C_PROFILE_AUTHORITY")}}?client_id={{config.get("CLIENT_ID")}}'>Edit Profile</a></li>
+ <li><a href='{{Auth(session={}, authority=config["B2C_PROFILE_AUTHORITY"], client_id=config["CLIENT_ID"]).log_in(redirect_uri=url_for("auth_response", _external=True))["auth_uri"]}}'>Edit Profile</a></li>
  {% endif %}
 
  <li><a href="/logout">Logout</a></li>

templates/login.html

@@ -20,7 +20,7 @@ <h1>Microsoft Identity Python Web App</h1>
  {% endif %}
 
  {% if config.get("B2C_RESET_PASSWORD_AUTHORITY") %}
- <a href="{{config.get('B2C_RESET_PASSWORD_AUTHORITY')}}?client_id={{config.get('CLIENT_ID')}}">Reset Password</a>
+ <a href='{{Auth(session={}, authority=config["B2C_RESET_PASSWORD_AUTHORITY"], client_id=config["CLIENT_ID"]).log_in(redirect_uri=url_for("auth_response", _external=True))["auth_uri"]}}'>Reset Password</a>
  {% endif %}
 
  <hr>