A simple Passport strategy for LinkedIn OAuth2 that works with lite profile.

This fork implements optional callback function that can be used to pass client id and secret to initialise oauth2 each time directly before an authentication. This function is called with the request object.

1var LinkedInStrategy = require('@dmapper/passport-linkedin-oauth2').Strategy;
2
3passport.use(new LinkedInStrategy({
4    getClient: async function(req) {
5      // some possible async operations
6      // ...
7      return {
8        id: '#####',
9        secret: '#####'
10      }
11    },
12    callbackURL: "http://127.0.0.1:3000/auth/linkedin/callback",
13    scope: ['r_emailaddress', 'r_liteprofile'],
14  },
15  function(accessToken, refreshToken, profile, cb) {
16    // To keep the example simple, the user's LinkedIn profile is returned to
17    // represent the logged-in user. In a typical application, you would want
18    // to associate the LinkedIn account with a user record in your database,
19    // and return that user instead.
20    return done(null, profile);
21  }
22));

====================================================================================

Install

npm install @dmapper/passport-linkedin-oauth2

Usage

Register the strategy

1var LinkedInStrategy = require('@dmapper/passport-linkedin-oauth2').Strategy;
2
3passport.use(new LinkedInStrategy({
4  clientID: LINKEDIN_KEY,
5  clientSecret: LINKEDIN_SECRET,
6  callbackURL: "http://127.0.0.1:3000/auth/linkedin/callback",
7  scope: ['r_emailaddress', 'r_liteprofile'],
8}, function(accessToken, refreshToken, profile, done) {
9  // asynchronous verification, for effect...
10  process.nextTick(function () {
11    // To keep the example simple, the user's LinkedIn profile is returned to
12    // represent the logged-in user. In a typical application, you would want
13    // to associate the LinkedIn account with a user record in your database,
14    // and return that user instead.
15    return done(null, profile);
16  });
17}));

and then authenticate as:

1app.get('/auth/linkedin',
2  passport.authenticate('linkedin', { state: 'SOME STATE'  }),
3  function(req, res){
4    // The request will be redirected to LinkedIn for authentication, so this
5    // function will not be called.
6  });

the login callback:

1app.get('/auth/linkedin/callback', passport.authenticate('linkedin', {
2  successRedirect: '/',
3  failureRedirect: '/login'
4}));

See this for details on LinkedIn API.

Auto-handle state param

The state param is used to prevent CSRF attacks, and is required by the LinkedIn API. You can ask Passport to handle the sending and validating of the state parameter by passing state: true as an option to the strategy:

1var LinkedInStrategy = require('@dmapper/passport-linkedin-oauth2').Strategy;
2
3passport.use(new LinkedInStrategy({
4  clientID: LINKEDIN_KEY,
5  clientSecret: LINKEDIN_SECRET,
6  callbackURL: "http://127.0.0.1:3000/auth/linkedin/callback",
7  scope: ['r_emailaddress', 'r_liteprofile'],
8  state: true
9}, function(accessToken, refreshToken, profile, done) {
10  // asynchronous verification, for effect...
11  process.nextTick(function () {
12    // To keep the example simple, the user's LinkedIn profile is returned to
13    // represent the logged-in user. In a typical application, you would want
14    // to associate the LinkedIn account with a user record in your database,
15    // and return that user instead.
16    return done(null, profile);
17  });
18}));

and then authenticate as:

1app.get('/auth/linkedin',
2  passport.authenticate('linkedin'),
3  function(req, res){
4    // The request will be redirected to LinkedIn for authentication, so this
5    // function will not be called.
6  });

Issue Reporting

If you have found a bug or if you have a feature request, please report them at this repository issues section. Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.

Author

Auth0

License

This project is licensed under the MIT license. See the LICENSE file for more info.