An application implementing the Login and Consent endpoints required by the OAuth2 Authorization Code flow.
Authentication is provided by Authboss.
The code is based on the reference implementation for User Login and Consent flow, and the authboss sample.
The user is not prompted to provide consent; it is automatically granted, as this application is designed for first-party clients.
The following can be passed as environment variables:
| Name | Description | Default |
|---|---|---|
COOKIE_STORE_KEY |
a base64-encoded key, used to authenticate cookies | random auto-generated |
SESSION_STORE_KEY |
a base64-encoded key, used to authenticate sessions | random auto-generated |
HYDRA_ADMIN_URL |
e.g. http://hydra:4445 | none |
PORT |
the port to listen on | 3000 |
ROOT_URL |
the external scheme, hostname and port of the service, useful when running behind a reverse proxy | http://localhost:PORT |
IMPORT_USERS |
the path to a json file from which to import users (see users.sample.json for an example) |
none |
hydra=oryd/hydra:v1.0.0
docker pull $hydraStart hydra server:
docker run -it --rm --name login-consent-hydra -p 4444:4444 -p 4445:4445 \
-e OAUTH2_SHARE_ERROR_DEBUG=1 \
-e LOG_LEVEL=debug \
-e OAUTH2_CONSENT_URL=http://localhost:3000/auth/consent \
-e OAUTH2_LOGIN_URL=http://localhost:3000/auth/login \
-e OAUTH2_ISSUER_URL=http://localhost:4444 \
-e DATABASE_URL=memory \
$hydra serve all --dangerous-force-http
Register client app test-client:
docker run --link login-consent-hydra:hydra $hydra clients create \
--endpoint http://hydra:4445 \
--id test-client \
--secret test-secret \
--response-types code,id_token \
--grant-types refresh_token,authorization_code \
--scope openid,offline \
--callbacks http://127.0.0.1:4446/callbackRun this application:
HYDRA_ADMIN_URL="http://localhost:4445" PORT=3000 IMPORT_USERS=users.sample.json go run .Use Hydra's built in test client hydra token user to start the Authorization Code flow:
docker run -p 4446:4446 --link login-consent-hydra:hydra $hydra token user \
--token-url http://hydra:4444/oauth2/token \
--auth-url http://localhost:4444/oauth2/auth \
--scope openid,offline \
--client-id test-client \
--client-secret test-secretVisit http://localhost:4446 to start the process. Login using the credentials:
User: [email protected]
Pass: 1234
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent