ebrahimmfadae / openid-connect-app

Sample project for implementing OIDC server with a web application and an API service.

OpenID Connect App

Sample project for implementing OIDC server with a web application and an API service.

Article reference

This repository is associated with an article series that provides a step-by-step guide on implementing OIDC (OpenID Connect 1.0) with Node.js, TypeScript, and MongoDB:

• Series: Implementing OpenID with Node.js, TypeScript, and MongoDB - A Step-by-Step Guide
• Part I: Developing Simple OpenID Authorization Server with Node.js & Typescript
• Part II: Persisting OpenID Server Data on MongoDB with Node.js
• Part III: Adding Resource Server Authorization to OpenID with Node.js
• Part IV: Configuring OpenID Security Settings in Node.js

Project requirements

The project has been developed and tested in the following environment:

$ node -v
v18.17.1

$ yarn -v
v3.6.3

$ docker --version
Docker version 20.10.7, build f0df350

$ docker compose version
Docker Compose version v2.15.1

Getting started

Install dependencies Open a terminal and run the following command to install the project dependencies:

$ yarn install

Run containers Start the project containers by running the command:

$ yarn compose:up

You can see the front end by navigating to http://localhost:3005 with your browser.

Stop containers When you're done using the application, stop the containers by running the command:

$ yarn compose:down

How to contribute

If you have any suggestions or want to propose code changes, you can open an issue or create a pull request with your proposed changes. Feel free to make any further adjustments or additions to the README to suit your project's specific requirements and conventions.

openid-connect-app's Issues

Error 500 at the last stage (Issue Tokens)

Hi! Thank you for always answering questions quickly.
I am currently trying to deploy an application on a remote server. And I'm having trouble with that.

The problem arises at the last stage - getting tokens when I try to send a CallBack form. And after it there is an error 500.
I think that the problem appears due to the fact that the OIDC on the server uses HTTPS. The APP uses HTTP.

Please tell me, maybe there are some ideas how to make this application work correctly on a remote server.

Here are the changed environment variables:
Public REMOTE addresses
PUBLIC_OIDC_ISSUER=testsso.site.com:443
PUBLIC_APP_URL=testsso.site.com:3005
PUBLIC_API_URL=testsso.site.com:3006

And also, an error occurs when registering a user: Internal Server Error

Another such warning appears in the logs:
oidc-provider WARNING: x-forwarded-proto header not detected for an https issuer, you must configure your ssl offloading proxy and the provider, see documentation for more details: https://github.com/panva/node-oidc-provider/tree/v7.14.3/docs/README.md#trusting-tls-offloading-proxies

P.S. I configured the NGINX server and now the transition from HTTP < - > HTTPS is working correctly. But the 500 error still appears when issuing tokens (send form on /token). And the 500 error appears when re-authorizing, when we should go to the page with CallBack

On the 'localhost', the application works without errors.

Upgrade dependencies

Node.js - ^18.17.0
Docker Compose: ^2.21.0
Yarn: ^3.6.3

Improve database implementation

Some readers were confused about the way that in-memory and persistent databases implemented

Separate back and front ends of web application

The client should not issue a token because it will need client secret. It may cause security issues.

Fix onlyClient bug in register route

It's hard to complete the registration when we need to handle the bearer token ourselves. Currently, we can not register.

Cleanup

Make Access Token and Refresh token in JWT format?

how to change the access token and refresh token to be in jwt format instead default one?

What is the username and password

First of all, thank you for your tutorial, which currently I try to understanding to how to use panva/oidc-provider trough running your code in my machine, however, i cant authenticated, since i dont know the username and the password, can you give me more explanation about this, what thing i should do to use your code?

Improve documentation

Dockerize dependencies