move default sso providers to util.sso, verify sso providers are actu…

…ally configured

frontend.py

@@ -43,10 +43,9 @@
     get_user_assets,
     is_within_timeframe,
     login_required,
-    DEFAULT_SSO_PROVIDER,
 )
 from util.redis import REDIS
-from util.sso import SSO_CONFIG
+from util.sso import DEFAULT_SSO_PROVIDER, SSO_CONFIG
 
 app = Flask(
     __name__,

util/__init__.py

@@ -11,16 +11,10 @@
 from flask import abort, current_app, g, jsonify, redirect, request, session, url_for
 
 from conf import CONFIG
+from util.sso import DEFAULT_ADMIN_SSO_PROVIDER, DEFAULT_SSO_PROVIDER
 
 from .ib_hosted import ib
 
-DEFAULT_SSO_PROVIDER = CONFIG.get(
-    "DEFAULT_SSO_PROVIDER", list(CONFIG["oauth2_providers"].keys())[0]
-)
-DEFAULT_ADMIN_SSO_PROVIDER = CONFIG.get(
-    "DEFAULT_ADMIN_SSO_PROVIDER", list(CONFIG["oauth2_providers"].keys())[0]
-)
-
 
 def error(msg):
     return jsonify(error=msg), 400

util/sso/__init__.py

@@ -65,6 +65,19 @@
 
 for provider in CONFIG["oauth2_providers"]:
     if provider not in SSO_CONFIG:
-        raise RuntimeError(
-            f"SSO provider {provider} found in config, but not configured."
-        )
+        raise RuntimeError(f"SSO provider {provider} found in config, but not known.")
+
+
+DEFAULT_SSO_PROVIDER = CONFIG.get(
+    "DEFAULT_SSO_PROVIDER", list(CONFIG["oauth2_providers"].keys())[0]
+)
+DEFAULT_ADMIN_SSO_PROVIDER = CONFIG.get(
+    "DEFAULT_ADMIN_SSO_PROVIDER", list(CONFIG["oauth2_providers"].keys())[0]
+)
+
+assert (
+    DEFAULT_SSO_PROVIDER in CONFIG["oauth2_providers"]
+), f"SSO provider {DEFAULT_SSO_PROVIDER} set as default, but not configured."
+assert (
+    DEFAULT_ADMIN_SSO_PROVIDER in CONFIG["oauth2_providers"]
+), f"SSO provider {DEFAULT_ADMIN_SSO_PROVIDER} set as default, but not configured."