scripts/oidc-provider.js

const { Provider, interactionPolicy } = require('oidc-provider');

const { base, Prompt, Check } = interactionPolicy;

const policy = base();
policy.add(
  new Prompt(
    { name: 'noop', requestable: false },
    new Check('foo', 'bar', (ctx) => {
      if (ctx.query?.scope?.includes('offline_access')) {
        ctx.oidc.params.scope = `${ctx.oidc.params.scope} offline_access`;
      }
      return Check.NO_NEED_TO_PROMPT;
    })
  ),
  0
);

const config = {
  clients: [
    {
      client_id: 'testing',
      client_secret: 'testing',
      redirect_uris: [
        'http://localhost:3000/api/auth/callback',
        'http://localhost:3000/api/page-router-auth/callback',
        'http://localhost:3000/api/edge-auth/callback'
      ],
      post_logout_redirect_uris: ['http://localhost:3000', 'http://localhost:3000/page-router'],
      token_endpoint_auth_method: 'client_secret_post',
      grant_types: ['authorization_code', 'refresh_token']
    }
  ],
  routes: {
    authorization: '/authorize', // lgtm [js/hardcoded-credentials]
    token: '/oauth/token',
    end_session: '/v2/logout'
  },
  scopes: ['openid', 'offline_access'],
  clientBasedCORS(ctx, origin, client) {
    return true;
  },
  features: {
    webMessageResponseMode: {
      enabled: true
    }
  },
  interactions: {
    policy
  }
};

module.exports = function createProvider(opts) {
  const issuer = `http://localhost:${opts.port || 3000}/oidc/`;
  const provider = new Provider(issuer, config);

  provider.use(async (ctx, next) => {
    await next();

    if (ctx.oidc?.route === 'end_session_success') {
      ctx.redirect('http://localhost:3000');
    }
  });

  return provider;
};