authentiqid / omniauth-authentiq

OmniAuth strategy for authenticating with Authentiq ID apps (iOS, Android). Supports OpenID Connect.

OmniAuth Authentiq

Official OmniAuth strategy for authenticating with an Authentiq ID mobile app (iOS, Android).

Application credentials (YOUR_CLIENT_ID and YOUR_CLIENT_SECRET below) can be obtained at Authentiq.

Installation

Add this line to your application's Gemfile

gem 'omniauth-authentiq', '~> 0.3.0'

Then bundle:

$ bundle install

Basic Usage with Rails

use OmniAuth::Builder do
  provider :authentiq, ENV['AUTHENTIQ_KEY'], ENV['AUTHENTIQ_SECRET'],
           scope: 'aq:name email~rs aq:push'
end

You can read the wiki for more extensive information on how to use the Authentiq Omniauth strategy for your rails application

• Homepage
• Installation and basic usage
• Scopes, redirect uri configuration and response data
• Remote Logout (Backchannel-logout)

Tests

Tests are coming soon.

Contributing

Bug reports and pull requests are welcome here

omniauth-authentiq's Issues

Read provider metadata dynamically

The module might obtain issuer, authorization_endpoint, token_endpoint, userinfo_endpoint and id_token_signing_alg_values_supported dynamically from the OpenID Provider Configuration Endpoint.

This is a prerequisite for supporting asymmetric signature algorithms, for which it will need to read the Provider's public keys from the jwks_uri in the metadata.

OmniAuth v2.0.0-rc1

Hello, maintainer of OmniAuth here.

I just wanted to make the maintainers of this gem aware of the discussion that I have opened regarding v2.0.0 of OmniAuth. I invite you to join in and voice any concerns you may have here: omniauth/omniauth#1017

Add support for RS/ES 256/384/512

Many (e.g. public) OIDC clients require the ID Token to be signed with an asymmetric signature, since they can't store the client secret safely.

This feature depends on #5 to be implemented first.