express-openid-connect

import express from 'express'; import { auth, requiresAuth } from 'express-openid-connect'; import dotenv from 'dotenv'; dotenv.config(); // Load environment variables from .env file const app = express(); const port = process.env.PORT || 3000; const config = { authRequired: false, auth0Logout: true, secret: process.env.SECRET ?? 'a-very-long-random-string-that-is-at-least-32-characters-long', baseURL: process.env.BASE_URL ?? `http://localhost:${port}`, clientID: process.env.CLIENT_ID ?? 'YOUR_AUTH0_CLIENT_ID', issuerBaseURL: process.env.ISSUER_BASE_URL ?? 'https://YOUR_AUTH0_DOMAIN', // Uncomment and configure a session store for production environments // session: { // store: new MemoryStore({ checkPeriod: 86400000 }) // } }; // Attach /login, /logout, and /callback routes to the baseURL app.use(auth(config)); // Basic route, checks if user is authenticated app.get('/', (req, res) => { res.send( `<h1>Welcome</h1><p>${ req.oidc.isAuthenticated() ? 'Logged in' : 'Logged out' }</p><a href="/login">Login</a> | <a href="/profile">Profile</a> | <a href="/logout">Logout</a>` ); }); // The /profile route requires authentication app.get('/profile', requiresAuth(), (req, res) => { res.send( `<h2>User Profile</h2><pre>${JSON.stringify(req.oidc.user, null, 2)}</pre><a href="/">Home</a>` ); }); // Example of a public route that does not require authentication app.get('/public', (req, res) => { res.send(` <h1>Public Page</h1> <p>User is ${req.oidc.isAuthenticated() ? 'authenticated' : 'not authenticated'}.</p> <a href="/">Home</a> `); }); app.listen(port, () => { console.log(`Server running on http://localhost:${port}`); console.log('Remember to set ISSUER_BASE_URL, CLIENT_ID, BASE_URL, and SECRET environment variables.'); console.log('Also, configure "Allowed Callback URLs" and "Allowed Logout URLs" in Auth0 to match your BASE_URL.'); });