Class OIDCClient

constructor

• new OIDCClient(options: IPlusAuthClientOptions): OIDCClient

  Parameters

  • options: IPlusAuthClientOptions

  Returns OIDCClient

OptionalaccessToken

OptionalidToken

OptionalidTokenRaw

Optionalissuer_metadata

options

OptionalrefreshToken

Optionalscopes

Optionaluser

getAccessToken

• getAccessToken(): Promise<string | undefined>

  Retrieve logged in user's access token if it exists.

  Returns Promise<string | undefined>

getExpiresIn

• getExpiresIn(): Promise<number | undefined>

  Retrieve access token's expiration.

  Returns Promise<number | undefined>

getIdToken

• getIdToken(): Promise<Record<string, any> | undefined>

  Retrieve logged in user's parsed id token if it exists.

  Returns Promise<Record<string, any> | undefined>

getIdTokenRaw

• getIdTokenRaw(): Promise<string | undefined>

  Retrieve logged in user's id token in raw format if it exists.

  Returns Promise<string | undefined>

getRefreshToken

• getRefreshToken(): Promise<string | undefined>

  Retrieve logged in user's refresh token if it exists.

  Returns Promise<string | undefined>

getScopes

• getScopes(): Promise<string[] | undefined>

  Retrieve logged in user's scopes if it exists.

  Returns Promise<string[] | undefined>

getUser

• getUser(): Promise<Record<string, any> | undefined>

  Retrieve logged in user's profile.

  Returns Promise<Record<string, any> | undefined>

initialize

• initialize(checkLogin?: boolean): Promise<OIDCClient>

  Initialize the library with this method. It resolves issuer configuration, jwks keys which are necessary for validating tokens returned from provider and checking if a user is already authenticated in provider.

  Parameters

  • checkLogin: boolean = true

    Make this false if you don't want to check user authorization status in provider while initializing. Defaults to true

  Returns Promise<OIDCClient>

isLoggedIn

• isLoggedIn(localOnly?: boolean): Promise<boolean>

  If there is a user stored locally return true. Otherwise it will make a silentLogin to check if End-User is logged in provider.

  Parameters

  • localOnly: boolean = false

    Don't check provider

  Returns Promise<boolean>

login

• login(
      options?: Partial<AuthRequestOptions>,
      localState?: Record<string, any>,
  ): Promise<void>

  Redirect to provider's authorization endpoint using provided parameters. You can override any parameter defined in OIDCClient. If you don't provide state, nonce or code_verifier they will be generated automatically in a random and secure way.

  Parameters

  • options: Partial<AuthRequestOptions> = {}
  • localState: Record<string, any> = {}

  Returns Promise<void>

loginCallback

• loginCallback(url?: string): Promise<Record<string, any> | undefined>

  After a user successfully authorizes an application, the authorization server will redirect the user back to the application with either an authorization code or access token in the URL. In the callback page you should call this method.

  Parameters

  • url: string = window.location.href

    Full url which contains authorization request result parameters. Defaults to window.location.href

  Returns Promise<Record<string, any> | undefined>

loginWithPopup

• loginWithPopup(
      options?: Partial<AuthRequestOptions>,
      popupOptions?: PopupOptions,
  ): Promise<Record<string, any>>

  Open a popup with the provider's authorization endpoint using provided parameters. You can override any parameter defined in OIDCClient. If you don't provide state, nonce or code_verifier they will be generated automatically in a random and secure way. You can also override popup options.

  NOTE: Most browsers block popups if they are not happened as a result of user actions. In order to display login popup you must call this method in an event handler listening for a user action like button click.

  Parameters

  • options: Partial<AuthRequestOptions> = {}
  • popupOptions: PopupOptions = {}

  Returns Promise<Record<string, any>>

logout

• logout(options?: LogoutRequestOptions): Promise<void>

  Redirect to provider's end_session_endpoint with provided parameters. After logout provider will redirect to provided post_logout_redirect_uri if it provided.

  Parameters

  • options: LogoutRequestOptions = {}

  Returns Promise<void>

revokeToken

• revokeToken(
      token: string,
      type?: TokenType,
      options?: RevokeOptions,
  ): Promise<any>

  OAuth2 token revocation implementation method. See more at tools.ietf.org/html/rfc7009

  Parameters

  • token: string

    Token to be revoked

  • type: TokenType = "access_token"

    Passed token's type. It will be used to provide token_type_hint parameter.

  • options: RevokeOptions = {}

    If necessary override options passed to OIDCClient by defining them here.

  Returns Promise<any>

silentLogin

• silentLogin(
      options?: AuthRequestOptions,
      localState?: Record<string, any>,
  ): Promise<any>

  Login without having an interaction. If refresh tokens are used and there is a stored refresh token it will exchange refresh token to receive new access token. If not it silently makes a request the provider's authorization endpoint using provided parameters. You can override any parameter defined in OIDCClient. If you don't provide state, nonce or code_verifier they will be generated automatically in a random and secure way.

  Parameters

  • options: AuthRequestOptions = {}
  • localState: Record<string, any> = {}

  Returns Promise<any>