scopes - Githubissues

jasonraimondi / ts-oauth2-server-example

This is an example implementation of the @jmondi/oauth2-server project using a NestJS/Express server and a Sveltekit client. This is supposed to be a more real example of how to implement the package in a production application.

https://github.com/jasonraimondi/ts-oauth2-server

MIT License

10 stars 2 forks source link

scopes #8

Open michielbdejong opened 4 months ago

michielbdejong commented 4 months ago

I'm trying to fill in the step where the user is asked to confirm scopes, which is currently being skipped. I'll send a PR when I get it working :)

michielbdejong commented 4 months ago

Trying to wrap my head around this (learning as I go along here)

authorize redirects to login if the user is not logged in
login redirects (back) to authorize if login is successful
authorize redirects to scopes if the request is not authorized
this depends on the function getIsAuthorizationApprovedFromSession which is yet to be implemented

michielbdejong commented 4 months ago

I guess it's safe to store the accept yes/no decision in a cookie