koosiedemoer/node-oidc-provider repository overview

A standard OpenID Connect Provider (OpenID Connect 1.0).

A clone of https://github.com/panva/node-oidc-provider⁠. It exposes a service that is best described here http://openid.net/specs/openid-connect-discovery-1_0.html⁠ and here .http://openid.net/specs/openid-connect-registration-1_0.html⁠.

Configured to make calls to an external auth service at gRPC :8980 Bank.Authenticate with only a user_name. The auth service should authenticate the user; typically via an 2FA mechanism.

It also exposes a gRPC service for the deletion of tokens on port 3010 as Provider.KillTokens (KillTokensRequest) returns (google.protobuf.Empty) {} where KillTokensRequest has the following structure: message KillTokensRequest { string user = 1; string relyingPartyName = 2; // combined with user is unique string removedScope = 3; // TODO implement }

Stateless - Uses Redis for state persistence.

Start container with:

docker run -d -p 3000:3000 -p 3001:3001 -p 3002:3002 -p 3010:3010 --add-host oidc-peripherals:192.168.99.100 --add-host redis-store:192.168.99.100 koosiedemoer/node-oidc-provider

. .

Firing http://192.168.99.100:3000/.well-known/openid-configuration⁠ should return the standard OIDC Provider data.