Getting Started

bun add elysia-openid-client

import Elysia from "elysia";
import { OidcClient } from "elysia-openid-client";

const rp = await OidcClient.factory({
  baseUrl: "https://app.example.com", // RP URL
  issuerUrl: "https://issuer.example.com", // OP URL
  clientMetadata: {
    client_id: "client-id",
    client_secret: "client-secret",
  },
});
const endpoints = rp.endpoints; // Endpoints plugin
const authHook = rp.authHook; // Auth hook plugin

console.log(rp.issuer.metadata); // Show OP metadata

new Elysia()
  .use(endpoints) // Add endpoints
  .guard((app) => // Define restricted area
    app
      .use(authHook) // Add onBeforeHandle hook for authentication/authorization
      .onBeforeHandle(({ sessionStatus, sessionClaims }) => {
        // Authorization by name, mail, group, etc.
      })
      .get("/", ({ sessionStatus }) => sessionStatus ? "Logged in" : "Restricted")
      .get("/status", ({ sessionStatus }) => sessionStatus)
      .get("/claims", ({ sessionClaims }) => sessionClaims)
      // Get UserInfo internally
      .get(
        "/userinfo",
        async ({ cookie, session }) =>
          await rp.userinfo({ cookie, session }),
      ),
  )
  .get("/free", () => "Not restricted")
  .get("/logout", () => "Logout completed")
  .listen(80);

And acccess https://app.example.com/.