express-stormpath | Build simple , secure web applications | Runtime Evironment library

by stormpath JavaScript Version: 4.0.0-rc4 License: Apache-2.0

X-Ray Key Features Code Snippets Community Discussions(2)Vulnerabilities Install Support

kandi X-RAY | express-stormpath Summary

express-stormpath is a JavaScript library typically used in Server, Runtime Evironment, Nodejs, MongoDB, Express.js applications. express-stormpath has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can install using 'npm i express-stormpath' or download it from GitHub, npm.

We are incredibly excited to announce that Stormpath is joining forces with Okta. Please visit the Migration FAQs for a detailed look at what this means for Stormpath users. We're available to answer all questions at support@stormpath.com.

Support

Quality

Security

License

Reuse

Support

express-stormpath has a low active ecosystem.

It has 327 star(s) with 109 fork(s). There are 50 watchers for this library.

It had no major release in the last 12 months.

There are 85 open issues and 222 have been closed. On average issues are closed in 49 days. There are 34 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of express-stormpath is 4.0.0-rc4

Quality

express-stormpath has 0 bugs and 0 code smells.

Security

express-stormpath has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

express-stormpath code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

express-stormpath is licensed under the Apache-2.0 License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

express-stormpath releases are available to install and integrate.

Deployable package is available in npm.

Installation instructions are not available. Examples and code snippets are available.

express-stormpath saves you 24 person hours of effort in developing the same functionality from scratch.

It has 67 lines of code, 0 functions and 93 files.

It has low code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of express-stormpath

Get all kandi verified functions for this library.

express-stormpath Key Features

No Key Features are available at this moment for express-stormpath.

express-stormpath Examples and Code Snippets

No Code Snippets are available at this moment for express-stormpath.

Community Discussions

Trending Discussions on express-stormpath

Okta oauth2 with external IdP

Node.js Express App- User Log in & Register Error

QUESTION

Okta oauth2 with external IdP

Asked 2020-Aug-16 at 21:05

I have an Angular app with express server where Okta acts as an IdP. This is already setup and works well. Now, I need to support SSO from an external app which uses Amazon Cognito. They have enabled our app for OAuth2 Auth code flow by providing us the clientId and Secret.

What I want to understand is where I should exchange authCode with accessTokens and also how I should manage sessions for users who come via SSO in Okta. I have few options:

I tried in the angular app using "angular-oauth2-oidc" library but ran into CORS issue while calling /authorize endpoint with AWS Cognito. Further, it seems like exchanging authCode with accessToken in front channel may not be the most secure way.
For SSO users, I could write a new route handler in express to manage the token exchange and have this route as the callback url in the initial authorization call to Cognito. However, my express server already uses "express-stormpath" sdk which handles session management for our usual case where Okta acts as IdP. How do I have express manage both local Okta user sessions as well as SSO user sessions with Cognito IdP, in the same place.
I also tried setting up Okta federation to external IdP. But, I am not sure how to route the auth call to external IdP while Okta itself acts as an IdP for our internal users.

I am more inclined towards 3 where I only talk to Okta and it takes care of managing auth for our internal users (Okta IdP) as well as SSO users from external IdP (Cognito).

Any help here would be much appreciated..

Thanks, RK

...

ANSWER

Answered 2020-Aug-16 at 21:05

That's an awful lot of questions in one, but here are some pointers:

1a. You need to add your SPA's domain to Okta as a trusted origin, as in step 7 of my write up

1b. You need to be more explicit about your concerns and what you mean when you say 'not the safe way'.

If you just want to get integrated with Okta as an SPA, try running my initial code sample.

2a. You need to have a strategy here, based on your goals. My personal views on best overall architecture for an SPA are summarised in my blog posts below, but there is a lot to understand here, and some people may have different views:

2b. If you are building an SPA you probably should avoid older web back end session management features, though some people use them.

3a. I agree with you that this is the preferred option. Aim to build your app so that it uses tokens from one provider, regardless of login method.

3b. When you redirect to Okta, you need to do one of these:

Send an idp parameter to the Cognito issuer Id when building the authorize request
Configure Okta to prompt the user for a login method, so that either Okta or Cognito can be used as the identity provider. This may happen by default once you configure an idp connection in Okta.

FEDERATION SCREENSHOTS

I had a quick look into this, and I'm not claiming it will be easy, or even possible, since it is common to run into vendor limitations. However, it is how the technology is supposed to work. It is better for this complexity to exist in the Authorization Server than in your application code.

In Cognito create an OAuth client:

Then get the metadata for Cognito, from a URL such as this:

https://cognito-idp.eu-west-2.amazonaws.com/eu-west-2_qqJgVeuTn/.well-known/openid-configuration

Then fill in the endpoints Okta needs:

This will generate the IDP value and give you a redirect URL:

Then enter the generated values in Cognito, to complete the configuration:

Source https://stackoverflow.com/questions/63428977

QUESTION

Node.js Express App- User Log in & Register Error

Asked 2017-Feb-10 at 01:28

I am totally new to node.js and Express. I'd like to build an app with user management. I've consulted the stormpath site (https://stormpath.com/blog/build-nodejs-express-stormpath-app) and the app built and shown as below:

The Welcome Page Screen shot

When I click the Register now and Login now , the error occurs:

The Register Error Screen shot

I'm totally followed the tutorial, and the server.js is as below:

...

ANSWER

Answered 2017-Feb-10 at 01:28

I work at Stormpath. There is minimal setup required to get express-stormpath working with your Application. Once you npm install express-stormpath and add var stormpath = require('express-stormpath');, you just need to do two more things:

Source https://stackoverflow.com/questions/42115775

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install express-stormpath

You can install using 'npm i express-stormpath' or download it from GitHub, npm.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: