oidc-provider

import { Provider } from 'oidc-provider'; import { strict as assert } from 'assert'; // Minimal in-memory adapter for quickstart (DO NOT USE IN PRODUCTION) // A real application requires a persistent storage solution (e.g., database). class MemoryAdapter { constructor(name) { this.name = name; this.store = new Map(); } async upsert(id, payload, expiresIn) { this.store.set(id, { payload, expiresAt: Date.now() + (expiresIn * 1000) }); return id; } async find(id) { const record = this.store.get(id); return record && record.expiresAt > Date.now() ? record.payload : undefined; } async findByUser(userCode) { for (const [id, record] of this.store) { if (record.payload?.userCode === userCode) return this.find(id); } return undefined; } async findByUid(uid) { for (const [id, record] of this.store) { if (record.payload?.uid === uid) return this.find(id); } return undefined; } async destroy(id) { this.store.delete(id); } async consume(id) { const record = await this.find(id); if (record) { record.consumed = Date.now(); } return record; } } // Basic configuration (replace with your secure, production-ready config) const configuration = { clients: [{ client_id: 'test_client', client_secret: 'test_secret', redirect_uris: ['http://localhost:3000/cb'], response_types: ['code'], grant_types: ['authorization_code', 'refresh_token'], }], features: { // Enable PKCE and Refresh Tokens for better security and UX pkce: { enabled: true }, refreshToken: { enabled: true }, }, // You MUST provide your own interaction UI for login/consent/etc. // This function maps an interaction request to a URL for your UI. interactions: { url: (ctx, interaction) => { // In a real app, this would redirect to your custom login/consent page return `/interaction/${interaction.uid}`; }, }, adapter: MemoryAdapter, // Use the in-memory adapter for quick testing // For production, always generate and securely manage strong, rotated secret keys jwks: { keys: [{ "d": "f81f-example-private-key-part-DO-NOT-USE-IN-PROD", "dp": "f81f-example-private-key-part-DO-NOT-USE-IN-PROD", "dq": "f81f-example-private-key-part-DO-NOT-USE-IN-PROD", "ext": true, "kty": "RSA", "n": "f81f-example-public-key-part", "p": "f81f-example-private-key-part-DO-NOT-USE-IN-PROD", "q": "f81f-example-private-key-part-DO-NOT-USE-IN-PROD", "qi": "f81f-example-private-key-part-DO-NOT-USE-IN-PROD", "use": "sig" }] } }; const provider = new Provider('http://localhost:3000', configuration); // Example of how you would integrate with an HTTP server, e.g., Express: // import express from 'express'; // const app = express(); // app.use(provider.callback()); // app.listen(3000, () => console.log('OIDC Provider listening on port 3000')); console.log('OIDC Provider instantiated. Remember to set up a real adapter, interaction UI, and secure JWKS.'); // To make this code runnable for checklist.day validation: assert.ok(provider instanceof Provider, 'Provider was not instantiated correctly'); console.log('Quickstart complete: Provider instantiated successfully.');