authguidance.websample1

Overview

• The first SPA sample using OAuth 2.0 and Open Id Connect, referenced in my blog at https://authguidance.com
• The goal of this sample is to integrate a Web UI and API with an external Authorization Server

Details

• See the Sample 1 Overview for details of how the integration works
• See the Sample 1 Instructions for infra setup and how to run the code

Programming Languages

• ES6 Javascript is used for the SPA
• NodeJS with ES6 is used for the API

Middleware Used

• The Oidc-Client Library is used to implement the Implicit Flow
• The OpenId-Client Library is used to handle API token validation
• Express is used to host both the API and the SPA content
• Okta is used for the Authorization Server