Shulou(Shulou.com)05/31 Report--

This article will explain in detail how Express integrates Authing OIDC single sign-on. The editor thinks it is very practical, so I share it for you as a reference. I hope you can get something after reading this article.

OIDC protocol: OIDC (OpenID Connect) is an identity authentication standard protocol based on OAuth3 protocol. OIDC uses OAuth3's authorization server to provide user authentication for third-party clients, and transmits the corresponding authentication information to the client, and can be applied to various types of clients.

Passport: Passport is Node.js 's authentication middleware, which is particularly flexible and modular. It is very convenient to implant any Express-based Web application. User name and password, Facebook and Twitter authentication are supported.

1. Configure Authing OIDC application

Register from Authing.cn and enter the Authing console, create OIDC applications, and configure application information.

The detailed configuration is as follows:

Application name:

Authentication address: https://.authing.cn

Callback URL: callback address after login, for example: http://localhost:3004/auth/cb

Authorization mode: default authorization_code, refresh_token, authing Token

Return type: default code

Authentication method when token is exchanged: default client_secret_post

Id_token signature algorithm: default HS256

After configuration, the valid information of OIDC is saved at the same time, which is convenient for the integrated use of Express in the following text.

App ID:5f34e94bece50b891729e345

App Secret:8226514d6740e5a9cd94fad4991e02e9

Issuer: https://aj00.authing.cn/oauth/oidc

Configuration information: https://aj00.authing.cn/oauth/oidc/.well-known/openid-configuration

Callback address: http://localhost:3004/auth/cb

II. Express Integration Authing OIDC

(1) Express builds local services

(2) Connect to the OIDC application and register the 'oidc' policy

(3) define OIDC access, callback, user information query and other APIs

(4) in addition to the above core steps, such as storing sesssion information, serializing user information, exiting, etc., please refer to the complete Express integration Authing OIDC code file below.

This is the end of the article on "how Express integrates Authing OIDC single sign-on". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, please share it out for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.