Archived

This repo is no longer in use.

---

Login/consent app

An application implementing the Login and Consent endpoints required by the OAuth2 Authorization Code flow.

Authentication is provided by Authboss.

The code is based on the reference implementation for User Login and Consent flow, and the authboss sample.

The user is not prompted to provide consent; it is automatically granted, as this application is designed for first-party clients.

Configuration

The following can be passed as environment variables:

Name	Description	Default
COOKIE_STORE_KEY	a base64-encoded key, used to authenticate cookies	random auto-generated
SESSION_STORE_KEY	a base64-encoded key, used to authenticate sessions	random auto-generated
HYDRA_ADMIN_URL	e.g. http://hydra:4445	none
PORT	the port to listen on	3000
ROOT_URL	the external scheme, hostname and port of the service, useful when running behind a reverse proxy	http://localhost:PORT
IMPORT_USERS	the path to a json file from which to import users (see users.sample.json for an example)	none

Demo with ORY Hydra

hydra=oryd/hydra:v1.0.0
docker pull $hydra

Start hydra server:

docker run -it --rm --name login-consent-hydra -p 4444:4444 -p 4445:4445 \
    -e OAUTH2_SHARE_ERROR_DEBUG=1 \
    -e LOG_LEVEL=debug \
    -e OAUTH2_CONSENT_URL=http://localhost:3000/auth/consent \
    -e OAUTH2_LOGIN_URL=http://localhost:3000/auth/login \
    -e OAUTH2_ISSUER_URL=http://localhost:4444 \
    -e DATABASE_URL=memory \
    $hydra serve all --dangerous-force-http

Register client app test-client:

docker run --link login-consent-hydra:hydra $hydra clients create \
    --endpoint http://hydra:4445 \
    --id test-client \
    --secret test-secret \
    --response-types code,id_token \
    --grant-types refresh_token,authorization_code \
    --scope openid,offline \
    --callbacks http://127.0.0.1:4446/callback

Run this application:

HYDRA_ADMIN_URL="http://localhost:4445" PORT=3000 IMPORT_USERS=users.sample.json go run .

Use Hydra's built in test client hydra token user to start the Authorization Code flow:

docker run -p 4446:4446 --link login-consent-hydra:hydra $hydra token user \
    --token-url http://hydra:4444/oauth2/token \
    --auth-url http://localhost:4444/oauth2/auth \
    --scope openid,offline \
    --client-id test-client \
    --client-secret test-secret

Visit http://localhost:4446 to start the process. Login using the credentials:

User: rick@councilofricks.com
Pass: 1234