sauravpandit
commented
5 years ago In order to fix the issue have set proxy and https_proxy using npm config but I am still getting the same error. Note: After user clicking continue at authorization site(providing permission) it calling my redirect url with code like below http://localhost:3000/callback?code=d6d8da87-0676-3b51-bb0e-5946ff50a847 But application is still showing me the same error. I am using "passport-oauth2": "^1.5.0" and node v10.15.1
danyxudong
saran2828
Hi, I was trying use this library for authentication using our internal oAuthprovider. They are using openId connect as oAuth provider. I am changing the original URL and client id client secrete for security purpose. Here is the issue I am facing. Step 1: Click on http://localhost:3000/login It will display Log In with IdP. Status:Passd Step 2: Click on "Log In with IdP" http://localhost:3000/login/idp will redirect user to authorization site. Status:Passed Step 3: User will provide credential at authorization site and then site will ask user for permission. Clicking continue at authorization site should redirect request to callback url. Status:Passed Step 4: Application should read token from redirected URL. Status: Failed
At first I was getting
After debugging application I understand that It is the following error which is causing the above error
My application is running at localhost and authorization site is at https. My best guess is It is happening because of http to https communication but I am not sure of that because most example in internet is are created in the same way I did. They are also using http to https communication.
It will be great if anyone can provide some solution to this issue.
Please let me know if you need more information regarding this.
I have created a small example like below `var express = require('express'); var passport = require('passport'); var OAuth2Strategy = require('passport-oauth2').Strategy; passport.use(new OAuth2Strategy({ authorizationURL: 'https://mysite.provider.com/oauth2/authorize', tokenURL: 'https://mysite.provider.com/token', clientID: 'Test7QCfQFiUca', clientSecret: 'TestwfYpNhu4QYDWAa', callbackURL: "http://localhost:3000/callback" }, function(accessToken, refreshToken, profile, cb) { User.findOrCreate({ exampleId: profile.id }, function (err, user) { return cb(err, user); }); } ));
passport.serializeUser(function(user, done) { done(null, user); });
passport.deserializeUser(function(obj, done) { done(null, obj); });
// Create a new Express application. var app = express();
// Configure view engine to render EJS templates. app.set('views', __dirname + '/views'); app.set('view engine', 'ejs');
// Use application-level middleware for common functionality, including // logging, parsing, and session handling. app.use(require('morgan')('combined')); app.use(require('cookie-parser')()); app.use(require('body-parser').urlencoded({ extended: true })); app.use(require('express-session')({ secret: 'keyboard cat', resave: true, saveUninitialized: true }));
// Initialize Passport and restore authentication state, if any, from the // session. app.use(passport.initialize()); app.use(passport.session());
// Define routes. app.get('/', function(req, res) { res.render('home', { user: req.user }); });
app.get('/login', function(req, res){ res.render('login'); });
app.get('/login/idp', passport.authenticate('oauth2'));
app.get('/callback', passport.authenticate('oauth2', { failureRedirect: '/login' }), function(req, res) { res.redirect('/'); });
app.get('/profile', require('connect-ensure-login').ensureLoggedIn(), function(req, res){ res.render('profile', { user: req.user }); });
app.listen(3000); `