Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

@okta/oidc-middleware

Package Overview
Dependencies
Maintainers
1
Versions
35
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@okta/oidc-middleware - npm Package Versions

124

3.0.0

Diff

Changelog

Source

3.0.0

Breaking Changes

See "Updating" in the README for migration steps

  • Logout callback route has been removed (/logout/callback). Local session is now cleared before redirect to Okta and the default logout redirect Uri is the app base URL. #644
oktauploader
published 2.1.0 •

Changelog

Source

2.1.0

Features

Bug Fixes

  • Errors during logout would cause the user to receive an empty page and remain logged in. #585 -

    Due to this bug, errors during logout were being incorrectly suppressed and would not have been seen by the server process. Instead, the user would see a blank page. With this fix, the user will be logged out correctly, but the error event will also now be emitted to the server process.

    Your server code should be prepared to either log or ignore this error.

oktauploader
published 2.0.0 •

Changelog

Source

2.0.0

Features

  • a4b54f7 - adds Okta logout capability

  • a999b95 - adds appBaseUrl, removes redirect_uri

  • Adds Okta logout capability (informing Okta that the session is ended rather than just locally forgetting the current session) (#162)

Breaking Changes

See "Updating" in the README for migration steps

  • redirect_uri config option is dropped. The value is either automatically derived from the appBaseUrl and the appropriate routes option, or explicitly set as loginRedirectUri
  • Two new routes are automatically generated and will override manually created routes of the same path. Unless routes is customized, they are /logout (POST only) and /logout/callback
  • routes.callback is renamed to routes.loginCallback
  • routes.callback.defaultRedirect is renamed to routes.loginCallback.afterCallback
oktauploader
published 1.0.2 •

Changelog

Source

1.0.2

Other

  • 2945461 - Updates @okta/configuration-validation version.
oktauploader
published 1.0.1 •

Changelog

Source

1.0.1

Features

  • ed29bf5 - Adds configuration validation for issuer, client_id, client_secret, and redirect_uri when passed into the middleware.

Other

  • c37b9cf - Updates the TCK version to support new integration tests.
  • 3582f25 - Rely on shared environment configuration from project root.
  • c8b7ab5a - Migrate dependencies to project root utilizing yarn workspaces.
  • 8494be0 - Migrate mocha tests to jest.
oktauploader
published 1.0.0 •

Changelog

Source

1.0.0

Features

  • Attach the requested tokens to the user context object (#226)

    app.get('/', (req, res) => {
      if (req.userContext) {
        const tokenSet = req.userContext.tokens;
        const userinfo = req.userContext.userinfo;
    
        console.log(`Access Token: ${tokenSet.access_token}`);
        console.log(`Id Token: ${tokenSet.id_token}`);
        console.log(`Claims: ${tokenSet.claims}`);
        console.log(`Userinfo Response: ${userinfo}`);
    
        res.send(`Hi ${userinfo.sub}!`);
      } else {
        res.send('Hi!');
      }
    });
    
  • Basic configuration validation for catching common input mistakes.

Breaking Changes

  • req.userinfo is now nested within req.userContext (#226). Please update any use of req.userinfo to req.userContext.userinfo.
oktauploader
published 0.1.3 •

Changelog

Source

0.1.3

Bug Fixes

Other

oktauploader
published 0.1.2 •

oktauploader
published 0.1.1 •

oktauploader
published 0.1.0 •

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc