express-openid-connect

express-openid-connect copied to clipboard

at_hash mismatch – improperly calculated?

1

### Describe the problem I'm trying to use the library for OIDC with [Keyrock](https://github.com/ging/fiware-idm). Unfortunately, I have an issue with `at_hash` value – it seems to be improperly calculated on...

a-mroz

### Describe the problem you'd like to have solved When redirecting to my server using the address bar, the auth flow functions as expected. However, when using a link that...

cpereyra5199

infnite redirect loop after successful login

1

### Describe the problem Hi, I'm using this library with quasar ssr and getting infinite redirect loop after successful login. However, when I open a new tab and visit the...

EngrKhizarIqbal

Encrypt session when using custom session stores

3

### Describe the problem you'd like to have solved When using a custom session store, sensitive user information may be stored in plaintext. The application should not have direct access...

BitPatty

Package Install Error on production

5

I am having issues installing this script, the following error is being served via Heroku. The packages were installed with Webstorm using the --legacy-peer-deps command (otherwise the error keeps crawling...

Stavtastic

Unable to set session expiry with express-session-store implementations

2

### Describe the problem The documentation for this module states [you can use a custom session store](https://github.com/auth0/express-openid-connect/blob/master/EXAMPLES.md#9-use-a-custom-session-store) and that it's compatible with [express-session-store](https://github.com/expressjs/session#session-store-implementation). I've found that this isn't quite true....

rowanmanning

after login, req.oidc.accessToken is undefined

7

### Describe the problem after authentication, the accessToken is undefined. Here's my code: const express = require("express"); const { auth } = require('express-openid-connect'); const app = express(); app.use( auth({ issuerBaseURL:...

fabsev

build(deps): bump marked and typedoc

1

Bumps [marked](https://github.com/markedjs/marked) and [typedoc](https://github.com/TypeStrong/TypeDoc). These dependencies needed to be updated together. Updates `marked` from 1.0.0 to 4.1.0 Release notes Sourced from marked's releases. v4.1.0 4.1.0 (2022-08-30) Features add async option...

dependabot[bot]

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of...

crew-security

backchannel logout token verification

3

### Describe the problem you'd like to have solved There is currently no implementation of `backchannel-logout` stated [here](https://openid.net/specs/openid-connect-backchannel-1_0.html#Backchannel). ### Describe the ideal solution There should be some sort of path...

d3vv3