'Unknown authentication strategy "oidc"' under Lambda

[kpeters-cbsi]

'Unknown authentication strategy "oidc"' under Lambda

[LBognanni]

For anyone else having this problem: the underlying issue is that ExpressOIDC in okta-oidc-middleware is not immediately ready for use - instead it fires a ready event that you must wait for.

This is annoying but not impossible to do in serverless: instead of just exporting serverless(app) do:

const waitForOkta = function(){
  return new Promise((resolve, reject) => {
    oidc.on('ready', () => {
      resolve();
    });
  });
}

module.exports.handler = async (event, context) => {
  await waitForOkta();
  let slsHandler = serverless(app);
  const result = await slsHandler(event, context);
  return result;
};

This worked up to a point for me, but then a slew of other errors started appearing.

What worked for me, was switching from okta-oidc-middleware to express-openid-connect which was soooo much easier to work with!

[kpeters-cbsi]

I ended up doing my UI in Angular, served by CloudFront, and my backend in Lambda. :)

[Abhi-CogniDev]

What worked for me, was switching from okta-oidc-middleware to express-openid-connect which was soooo much easier to work with!

I'm trying to get the express-openid-connect to work but not able to get the login flow completed..
if possible can you please share your express-openid-connect implementation

[leebrandt]

Generally, you need to load your NPM modules to Lambda. Here is a SO post to help with that.

https://stackoverflow.com/questions/34437900/how-to-load-npm-modules-in-aws-lambda

[kpeters-cbsi]

My NPM modules are in Lambda. Serverless handles that.