This library implements a very simple version of the Solid OIDC protocol:
- AuthorizationCodeGrant
- with PKCE
- with
iss
check (TODO double check if necessary to check token iss as well) - with dynamic client registration (TODO support provided
client_id
and client profile documents) - RefreshTokenGrant to renew a session
- Unsure about storage. Currently,
client_id
,client_secret
,refresh_token
andtoken_endpoint
are stored insessionStorage
. I see that other implementations store the session state inlocalStorage
- no idea if that is deemed secure nowadays.
Initial version co-authored by @dschraudner and @uvdsl for the MANDAT project, and first released by DATEV Research.