remix-auth-okta

// app/utils/auth.server.ts import { Authenticator } from "remix-auth"; import { OktaStrategy } from "remix-auth-okta"; import { createCookieSessionStorage } from "@remix-run/node"; // Example for session storage // Define your user type that will be stored in the session interface AppUser { id: string; email: string; } // Configure session storage (replace with your actual session setup) const sessionStorage = createCookieSessionStorage({ cookie: { name: "_session", httpOnly: true, secure: process.env.NODE_ENV === "production", // Use secure cookies in production secrets: [process.env.SESSION_SECRET ?? "s3cr3t"], // Must provide a secret maxAge: 60 * 60 * 24 * 7, // 7 days }, }); // Create an instance of the authenticator export const authenticator = new Authenticator<AppUser>(sessionStorage); // Initialize the Okta Strategy with environment variables const oktaStrategy = new OktaStrategy( { issuer: process.env.OKTA_ISSUER ?? 'YOUR_OKTA_ISSUER_MISSING', clientID: process.env.OKTA_CLIENT_ID ?? 'YOUR_OKTA_CLIENT_ID_MISSING', clientSecret: process.env.OKTA_CLIENT_SECRET ?? 'YOUR_OKTA_CLIENT_SECRET_MISSING', callbackURL: process.env.OKTA_CALLBACK_URL ?? 'http://localhost:3000/auth/okta/callback', }, async ({ accessToken, refreshToken, extraParams, profile }) => { // This callback runs after a successful Okta authentication. // Here, you would typically find or create a user in your database // based on the profile information (e.g., profile.email). console.log("Okta Profile:", profile); // Return a user object that will be stored in the session. return { id: profile.id, email: profile.email ?? 'unknown@example.com' }; } ); // Register the strategy with a unique name (e.g., "okta") authenticator.use(oktaStrategy, "okta");