Questions tagged [node-oidc-provider]

The node-oidc-provider library is a NodeJS module that implements a standard OpenID Connect Provider

36 questions
3
votes
2 answers

How to change access token format using node oidc provider

I implemented node oidc Provider in my project and I got access_token also. but in access token in different format. how to change jwt token format and I added change access_token format to jwt but it could not work. How to resolve it this Issue and…
2
votes
0 answers

Node-oidc-provider, how i can validate my acess token which already in jwt token

I use nestjs, and use node-oidc-provider package to make and identity provider, but currently stack to validate the jwt in my strategy middleware, which i follow from this…
ziad696
  • 31
  • 1
2
votes
0 answers

`node-oidc-provider` with Email verification

I'm creating an OIDC provider with oidc-provider. For now, my Registration flow required email verification step, which is handler outside oidc-provider. This approach works but it leads to an issue that user can not automatically login after…
Dat Nguyen
  • 127
  • 1
  • 5
2
votes
1 answer

Access Denied after interactionFinished using node-oidc-provider

I'm using node-oidc-provider in a custom framework, adonisjs to be specific. At this point, I can visit http://localhost:3333/auth?client_id=foo&redirect_uri=http://localhost:3333/launch&response_type=code&scope=openid&nonce=123&state=321 and be…
2
votes
1 answer

[node oidc provider]: Authorization code flow

I am trying to build an OAuth2.0 server using https://www.npmjs.com/package/oidc-provider. The 2 main flows that I need to support are the client credentials one and the authorization code flow. For the latter the idea is to send an authorization…
2
votes
0 answers

While migrating panva / node-oidc-provider package in nestjs from version 6 to 7.11 getting error 'interaction session not found'

hi i am getting interactions and sessions created in mongo collection. however i am getting below error. at resumeAction (/app/iam-authorization-server-microservice/node_modules/oidc-provider/lib/actions/authorization/resume.js:28:11) at…
1
vote
0 answers

How can I handle 'Session Trampling' error while authenticating multiple sessions in the same browser with node-oidc-provider?

When we try to open multiple browser instances and try to login with same user credentials, we get different kinds of errors. The very first browser session is loaded fine but the further sessions throw error. "Something went wrong". When trying to…
1
vote
1 answer

node-oidc-provider missing offline_access scope

I'm using node-oidc-provider v6 and missing offline_access scope in authorization response. I found in the library code that offline_access can be automatically removed in some…
1
vote
0 answers

Node-oidc-provider, how i can add another property in JWT access token?

I use nestjs, and use node-oidc-provider package to make and identity provider, but currently stack how to add another property in my JWT access token? The reason behind this basically i want to add roles property attach in jwt token, is so every…
1
vote
1 answer

How to log out a user without revoking grants in node-oidc-provider

I am using the node-oidc-library to create an oauth authorization server. Everything seems to be working fine, except for logging out the user. The documentation is a bit silent on how to log out a user, but I think it is hidden in the FAQ where it…
Peter
  • 870
  • 6
  • 20
1
vote
0 answers

Issue adding a JWKS to panva's node oidc-provider

I am trying to add a JWKS to in node oidc-provider's configuration: // configuration of oidc provider const configuration = { jwks: { keys: [process.env.JWKS_PRIVATE_KEY] } } I saved the JSKW_PRIVATE_KEY in a .env…
Sami
  • 11
  • 1
1
vote
1 answer

How to issue access token for both userinfo endpoint and resource server call with node-oidc-provider

Why does node-oidc-provider refuse to issued a single token for both /userinfo endpoint and api(resource server) call ? I don't see at anywhere in both oauth2 and open id connect specs that the authorization server should not issue an access token…
1
vote
0 answers

How to get 'sub' claim on access_token in client credentials grant using oidc-provider npm package

The access_token generated using oidc-provider package for client_credentials grant does not contain 'sub' claim. As per spec: RFC 7523 : JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants Please check the…
1
vote
1 answer

Setting up node oidc-provider with keycloak docker

I am trying to have a basic node oidc-provider app as OIDC provider for my keycloak server. Keycloak correctly links to the login page of my app. After entering username and password I get correctly transfered back to keycloak. However, keycloak…
jihtat
  • 11
  • 2
1
vote
1 answer

How I can use Pre and post-middlewares | oidc-provider panva

The documentation is not clear for me and I need to validate the parameters data to define if the user is allowed to get his login or not, I am using express too, so I'm so confused with expressApp.use () and provider.use(). Simply, I need to mix…
1
2 3