Web.OIDC.Client.IdTokenFlow

Documentation

getAuthenticationRequestUrl

Arguments

:: MonadIO m

=> OIDC

-> Scope

used to specify what are privileges requested for tokens. (use ScopeValue)

-> Maybe State

used for CSRF mitigation. (recommended parameter)

-> Parameters

Optional parameters

-> m URI

Warning: This function doesn't manage state and nonce. Use prepareAuthenticationRequestUrl only unless your IdP doesn't support state and/or nonce.

Make URL for Authorization Request.

getValidIdTokenClaims :: (MonadIO m, FromJSON a) => SessionStore m -> OIDC -> State -> m ByteString -> m (IdTokenClaims a)

Get and validate access token and with code and state stored in the SessionStore. Then deletes session info by sessionStoreDelete.

prepareAuthenticationRequestUrl

Arguments

:: MonadIO m

=> SessionStore m

-> OIDC

-> Scope

used to specify what are privileges requested for tokens. (use ScopeValue)

-> Parameters

Optional parameters

-> m URI

Make URL for Authorization Request after generating state and nonce from SessionStore.