pedroetb/node-oauth2-server-mongo-example

Working oauth2 server with mongodb storage and minimal configuration

node-oauth2-server-mongo-example's Issues

REQ : upgrade oidc

scope implementation

how to implement scopes like openid, offline_access, profile, email

Invalid grant: refresh token is invalid

Hello all, When I received a new token from the Refresh_token grant type I encountered "Invalid grant: refresh token is invalid". I stored tokens with AWS DynamoDB. In line of 135 in node-oauth2-server-mongo-example/model.js file is referred to as token.client.id is client.clientId. It's not working for me. I tried to store the client.id instead of client.clientId. It's working fine now. Thanks for the oauth2-server example.

how do you - You can call the loadExampleData function at model.js in order to create these entries automatically.

how do you get the data to insert into mongo db ?

You can call the loadExampleData function at model.js in order to create these entries automatically.

I tried just calling that function and its not going in.

switch to client credentials grant type

Password grant type is working great - i can generate a toke.
I need to use the client_credentials grant type. What code change needs to be made to use it ?

Can't generate refresh token with grant type refresh_token

I tried your example,still error when use refresh_token type,got below error

curl http://localhost:3000/oauth/token \
> -d "grant_type=refresh_token" \
> -d "client_id=application" \
> -d "client_secret=secret" \
> -d "refresh_token=5de9099aa1925063d05b75c4cca4377c9f9982ea" \
> -H "Authorization: Basic YXBwbGljYXRpb246c2VjcmV0" \
> -H "Content-Type: application/x-www-form-urlencoded"

{"statusCode":400,"status":400,"code":400,"message":"Unauthorized client: `grant_type` is invalid","name":"unauthorized_client"}

can this play nicely with Next-authJS

I am trying to work out how to create a provider that connects this to Next-Auth JS.

this is the information that they provide.
https://next-auth.js.org/configuration/providers/oauth#authorization-option

However the issue is that this code has no

authorization: {
  url: "https://example.com/oauth/authorization", // WHERE DO I POINT THIS TOO?
  params: { scope: "email" }
}

MongoDB atlas?

Can this be used if you use Mongodb atlas?

HTTPS instead of HTTP

what needs to be modified to use HTTPS instead of HTTP ? is this possible for Oauth2-Server