Questions tagged [oauth2orize]

OAuth 2.0 authorization server toolkit for Node.js.

OAuth2orize is an authorization server toolkit for Node.js. It provides a suite of middleware that, combined with Passport authentication strategies and application-specific route handlers, can be used to assemble a server that implements the OAuth 2.0 protocol.

Web: https://github.com/jaredhanson/oauth2orize

25 questions
23
votes
1 answer

What's the difference between passport and oauth?

I'm trying to build an authentication service with express.js, but I didn't catch the idea of authentication modules yet. What's difference between passport and oauth middleware? Are they dependent of each other? Is useless to have the…
João Pedro
  • 429
  • 8
  • 20
8
votes
1 answer

Securing a nodejs / sailsjs API with OAuth2

I have developed a REST API with sailsjs and I'd like to add OAuth2 authorization to secure this API. I'm quite new to OAuth and I'm not sure where to start. I found several modules that could be used for this purposes, for instance oauth2orize and…
Luc
  • 16,604
  • 34
  • 121
  • 183
7
votes
1 answer

Where I should store code_verifier (oauth 2.0 code authorization flow with PKCE)

I'm currently working on an oauth 2.0 code authorization grant with PKCE in an SSR page (working with React in the front and Express in the back). Where I should store code_verifier when client request to authorization server code (when…
elaineee
  • 93
  • 1
  • 2
  • 12
5
votes
2 answers

implementing own oauth2 server and api server

we are trying to implement oauth 2 server and api server (both are different server). (using nodejs for all) we are using https://github.com/FrankHassanabad/Oauth2orizeRecipes Authorization Code flow do we need to write new validateToken function…
jit
  • 1,616
  • 3
  • 21
  • 49
4
votes
2 answers

oauth2-server implementation nodejs

I'm trying to implement an OAUTH2 server in nodeJS, which allows client app to login users using my website(like login with google and in my case it is amazon alexa, which consumes this API/Client app). I tried using…
mahendra
  • 367
  • 5
  • 18
4
votes
1 answer

Protecting an API with Scopes (oauth2orize, passport, express, Nodejs)

I'm trying to create an API with node/express, and secure it with Passport and oauth2orize. I've got the API working, I've got the oauth2 stuff working, but I can't seem to figure out how to implement securing API methods with scopes. The…
Codespeare
  • 41
  • 1
  • 4
3
votes
0 answers

How to setup OAuth 2.0 server using loopback.io

I have set up OAuth as per the docs and this link https://strongloop.com/strongblog/node-js-loopback-api-gateway-sample-applications/. There are a few issues in understanding the usage of the code base and flow based on the options of…
Gary
  • 2,293
  • 2
  • 25
  • 47
3
votes
1 answer

How to verify and renew a JWT id_token during my SPA load?

I'm pretty new to OAuth 2.0 and OpenID Connect and I have trouble understanding some parts of the flow (or what best practices should I use)... Sorry for the lengthy post :) My Setup: An OP (OpenID Provider) that is basically an express server that…
mati.o
  • 1,398
  • 1
  • 13
  • 23
3
votes
0 answers

OAuth2 basic strategy and password grant_type

I m developping an application using oauth2orize using BasicStrategy and grant_type=password and I m having some trouble with this part of code : passport.use('client-basic', new BasicStrategy((username, password, callback) => { …
mfrachet
  • 8,772
  • 17
  • 55
  • 110
3
votes
1 answer

OAuth 2.0 authentication for own mobile client

I am developing an app using node.js which will also have an mobile client. I am looking to make the authentication using OAuth 2.0. Is there any good module which allows me to have OAuth 2.0 authentication server? I looked at a subsidiary module of…
Saransh Mohapatra
  • 9,430
  • 10
  • 39
  • 50
2
votes
1 answer

OAuth2orize login flow looping infinitely

Looking to get an OAuth2 endpoint set up for my website. I am using OAuth2orize on the OAuth server, and passport-oauth on the client server. I'm using the oauth2orize example almost verbatim to get it working first. When I begin the login flow, it…
Julian H. Lam
  • 25,501
  • 13
  • 46
  • 73
1
vote
0 answers

oauth2 server creation Nodejs

I'm trying to implement an OAUTH2 server in nodeJS, which allows client app to login users using my website(like login with google). I tried using oauth2orise(https://www.npmjs.com/package/oauth2orize) and referred few…
Tanzil KM
  • 11
  • 2
1
vote
0 answers

Logging in programmatically with nodebb using Oauth2

So I am designing an app with nodejs and I need to create a user forum. I decided against reinventing the wheel so I choose to use nodebb. However, my app has a user log in and so does node bb and I want the user to be logged in automatically in…
J.Ewa
  • 205
  • 3
  • 14
1
vote
1 answer

Generate oauth2orize access token programmatically for test user?

How can I generate a usable (live, authenticated) access token without forcing the client through redirect/authentication? I'm building an IFTTT channel with node/express/oauth2orize. IFTTT requires that a test user can be generated by the endpoint…
Joe Beuckman
  • 2,264
  • 2
  • 24
  • 63
1
vote
1 answer

How to implement oauth2orize in hapijs

I implemented oauth2orize in hapijs. But when I am calling the api, nothing happen. The function goes inside code.js file of oauth2orize module and hangs in between. Please suggest me how to implement oauth2orize in hapjs. hapi-oauth2orize is also…
Garima
  • 1,566
  • 2
  • 11
  • 14
1
2