search

jaredhanson / passport-openid

OpenID authentication strategy for Passport and Node.js.
https://www.passportjs.org/packages/passport-openid/?utm_source=github&utm_medium=referral&utm_campaign=passport-openid&utm_content=about
MIT License
98 stars 90 forks source link

Missleading library #46

Open kareha opened 4 years ago

kareha commented 4 years ago

Hi,

maybe I totally missunderstud oidc, but your client library doesn't help at all to connect to a idp.

Where do I set the URL to the IDP? Why do I get back an Identifier, when I need the profile? An Identifier doesn't help because my relying party or client does not have a user database and it will never have.

Why is there a local login page? That doesn't make any sense. When a user clicks on a login button, or the user has no active session an automatic redirect to the IDP should happen. A local login page would make sense at the password flow where the client sends the user password to the idp, but thats not part of oidc.

I don't need a "post" /auth/login endpoint. For what?

How do I realize an implicit or auth code flow?

I thing this library is completely missleading. It is not a oidc client library.

Please help. Maybe I'm misunderstanding something. Thx

kareha commented 4 years ago

Nevermind. I found a library that helps: https://www.npmjs.com/package/openid-client

This can be closed.