rsp2k/headplane
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat: overhaul oidc work

Browse source
This commit is contained in:
Aarnav Tale 2025-08-28 22:49:55 -04:00
parent bda9dedbfd
commit eb4669498a
No known key found for this signature in database
10 changed files with 200 additions and 139 deletions
Download patch file Download diff file Expand all files Collapse all files

9
app/utils/oidc.ts
View file

@ -33,22 +33,21 @@ export function getRedirectUri(req: Request) {
export async function beginAuthFlow(
config: Configuration,
redirect_uri: string,
token_endpoint_auth_method: string,
scope: string,
extra_params: Record<string, string> = {},
) {
const codeVerifier = client.randomPKCECodeVerifier();
const codeChallenge = await client.calculatePKCECodeChallenge(codeVerifier);
const params: Record<string, string> = {
...extra_params,
scope,
redirect_uri,
scope: 'openid profile email',
code_challenge: codeChallenge,
code_challenge_method: 'S256',
token_endpoint_auth_method,
state: client.randomState(),
};
// PKCE is backwards compatible with non-PKCE servers
// so if we don't support it, just set our nonce
if (!config.serverMetadata().supportsPKCE()) {
params.nonce = client.randomNonce();
}