diff --git a/pass/routes/authentication.js b/pass/routes/authentication.js index c8c016da62aa82d342c68a832a10d4380d34586d..e905945413ae134a8eff52d285d8395b25d0278a 100644 --- a/pass/routes/authentication.js +++ b/pass/routes/authentication.js @@ -2,9 +2,12 @@ var express = require("express"); var router = express.Router(); const config = require("config"); const jose = require("jose"); -const { auth, requiresAuth } = require("express-openid-connect"); +const { auth, requiresAuth, Session } = require("express-openid-connect"); +const dayjs = require("dayjs"); -const session_prefix = "auth:"; +const auth_session_expiration_minutes = 1; + +const access_keys_redis_key = "accesskeys"; /** * Authorization is done using Oauth2 via any GitLab Instance @@ -22,12 +25,20 @@ const session_prefix = "auth:"; */ router.use( auth({ - issuerBaseURL: `${config.get("app.gitlab.url")}`, + issuerBaseURL: `${config.get("app.openid_auth.url")}`, baseURL: config.get("app.url"), - clientID: config.get("app.gitlab.app_id"), - clientSecret: config.get("app.gitlab.app_secret"), + clientID: config.get("app.openid_auth.app_id"), + clientSecret: config.get("app.openid_auth.app_secret"), secret: config.get("app.secret"), idpLogout: true, + session: { + absoluteDuration: 1, + }, + afterCallback: (req, res, session, decodedState) => { + let access_token = session.access_token; + console.log(session); + return session; + }, authRequired: false, authorizationParams: { response_type: "code",