Library / Security & Compliance
Security & Compliance
OIDC Login Client with Login and Welcome Pages
When a user visits the webhook, it serves a login page, exchanges the OIDC token, fetches user info and shows a welcome page.
What it does
In this set, you have to retrieve from your identity provider : - auth url - token url - userinfo url - the client id you created for this flow - scopes to use, at least "openid" scope if you do not want to use PKCE, you have to fill : - client_secret - redirect_uri (which is the webhook uri)
The steps
- Webhook
- Code
- user info
- send back login page
- IF token is present
- Welcome page
- send back welcome page
- IF user info ok
- login form
- Set variables : auth, token, userinfo, client id, scope
- IF we have code in URI and not in PKCE mode
- get access_token from /token endpoint with code
Similar automations