auth0 / express-openid-connect

An Express.js middleware to protect OpenID Connect web applications.

auth0/express-openid-connect Issues

absoluteDuration: false not working as expected
Updated 6 days ago
Be able to have different strategies of session storage between logged users or anonymous ones
Updated 6 days ago
AuthorizationParameters.nonce is discarded.
Updated a month ago
Remove hard-coded logout endpoint for broader provider compatibility
Closed 2 months ago2
Unable to perform error handling for custom session store.
Updated 2 months ago
Request for support of rotating ID Token algorithm
Updated 2 months ago2
Documentation gaps (readme.md), is this framework ONLY for auth0, or can work with any OIDC provider?
Closed 3 months ago3
Deprecation warning (promisify) when upgrading to Node v21.6.0
Updated 4 months ago
Please support NestJS.
Closed a year ago9
Continue Signed In Functionality
Closed 8 months ago3
Have a way to configure different domain for refreshing token and accessing login page
Closed 7 months ago1
BadRequestError: checks.state argument is missing
Closed 7 months ago2
Allow logout_hint instead of id_token_hint
Closed 8 months ago3
checks.state argument is missing
Closed 8 months ago2
code samples, an interface, or middleware for fastify (express is becoming legacy)
Closed 9 months ago1
node crypto hkdfSync vs hkdf
Closed 10 months ago2
Timeout issues when calling `/oauth/token` and/or `.well-known/openid-configuration`
Closed 10 months ago4
ES6 Modules are not yet supported completely.
Closed a year ago1
the "originalUrl" is not used as the default "returnTo" url, the baseUrl is
Closed a year ago2
AggregateError: Issuer.discover() failed
Closed a year ago2
Incorrect forwarding with reverse proxy after callback
Closed a year ago5
Expose the http parameters, including https, e.g. certificate authority (ca) in auth config
Closed a year ago5
Use of sync api
Closed a year ago1
Using express-openid-connect with express 5
Closed a year ago1
Auth flow doesn't complete when using AWS Lambda
Closed a year ago2
Question: mitigate `checks.state argument is missing` error when messing with concurrent login.
Closed a year ago12
Question: How to set up swagger to work with express-openid-connect?
Closed a year ago7
Modify Config based on request headers.
Closed a year ago2
Question: `genid` function as async
Closed a year ago2
Logout does not produce the expected behavior when performed by GET <CUSTOM_DOMAIN>/v2/logout call (PKCE flow)
Closed a year ago6
client_credentials flow support?
Closed a year ago2
`/logout` cookie cleaning issues
Closed a year ago2
isExpired should not only check access token, but also provide possibility to validate for id token
Closed a year ago2
Setting idpLogout to true is not working as expected
Closed a year ago1
Use appSession for unauthenticated users
Closed a year ago2
in-flight request re-establishes `appSession` cookie that is cleared by `/logout`
Closed a year ago4
Allow authorization bearer header to authenticate
Closed a year ago5
Question - appSession cookie not backed with a session store - is there a workaround?
Closed a year ago4
The 'expires' prop required in the cookiesConfig
Closed a year ago4
BadRequestError: checks.state argument is missing, While Production and deployment in digital ocean platform.
Closed a year ago5
invalid_token after success login
Closed 2 years ago2
Incorrect Type Definitions for Properties Added in SDK-3808
Closed 2 years ago1
Dependency "cb" causing security issues in Nexus because of missing LICENSE file and being 10 years from last update
Closed 2 years ago5
Defense-In-Depth Post-Login CSRF Support
Closed 2 years ago4
TypeError: r(...)(...).extend is not a function
Closed 2 years ago11
Cannot destructure property 'header' of '(intermediate value)' as it is undefined.
Closed 2 years ago5
Dynamic Connection Resolution
Closed 2 years ago2
because every request will do redis set action, and sometimes will refreshtoken unsuccessfully.
Closed 2 years ago7
Wrong interface links in the API reference
Closed 2 years ago1
Every actions in Express will trigger redis set action and get action automatically
Closed 2 years ago1