criipto-oidc-js

Implementing a simple client-secret based flow

1// Setup metadata fetching
2const configurationManager = new OpenIDConfigurationManager(
3  'https://{{YOUR_CRIIPTO_DOMAIN}}',
4  '{{YOUR_CRIIPTO_CLIENT_ID}}'
5);
6const configuration = await configurationManager.fetch();
7
8// Build authorize url
9const authorizeUrl = buildAuthorizeURL(
10  configuration,
11  {
12    redirect_uri: 'https://yourdomain/oauth2/callback',
13    scope: `openid`,
14    response_mode: 'query',
15    response_type: 'code',
16    /** set to a specific acr_values to request a specific eID */
17    acr_values: undefined
18  }
19);
20
21// Redirect users browser to authorize url
22// Exactly how would depend on your platform
23// ...
24// After user has logged in they are returned
25// to your 'redirect_uri' with either
26// a 'code' or a 'error' query parameter
27const queryParams = {/*...*/}
28const {id_token} = await codeExchange(configuration, {
29  code: queryParams.code,
30  redirect_uri: 'https://yourdomain/oauth2/callback',,
31  client_secret: '{{YOUR_CRIIPTO_CLIENT_SECRET}}'
32});
33
34// id_token is a JWT containg data based on the chosen
35// authentication option, see https://docs.criipto.com/verify/getting-started/token-contents/