oauth2 token

[ray007]

Is there a sample somewhere (best plain js) with getting the access token from an oauth2 provider after calling authorize?

[cecilia-sanare]

I do have a vanilla / plain js example. However its a bit extensive since I still wanted to display the information on the page.

https://github.com/salte-auth/examples/tree/main/vanilla

Here's a simplified version that doesn't bother with rendering anything on the page and just outputs the value to the log.

import { SalteAuth } from '@salte-auth/salte-auth';
import { Auth0 } from '@salte-auth/auth0';
import { Popup } from '@salte-auth/popup';

const auth = new SalteAuth({
  providers: [
    new Auth0({
      url: 'https://salte-os.auth0.com',
      clientID: '9JTBXBREtckkFHTxTNBceewrnn7NeDd0',
    })
  ],

  handlers: [
    new Popup({
      default: true,
    })
  ]
});

// If you're already authenticated then the token will already be present.
console.log(auth.provider('auth0').idToken);

// Otherwise you have to wait for the user to login.
auth.on('login', (error, { provider }) => {
    if (error) {
      console.error(error);
    } else {
      console.log(auth.provider(provider).idToken);
    }
});

Hope this helps!

[ray007]

Hmm, something does not fit here.

In my testing, provider in the login event handler is a string (which I can resolve with auth.provider(...), but this code does not call the .../token endpoint of my oauth2 server.

And I think the .idToken is only for OpenID providers, I have a property accessToken, but that one is empty.

[cecilia-sanare]

Whoops, you're completely right regarding the provider being a string!
I updated the example to be correct.

Keep in mind that the example I gave is specific to Auth0, so you'll have to update the provider to likely use the Generic Provider assuming there isn't a matching provider available already.

[ray007]

The Auth0 provider is an OpenID provider, not an OAuth2 one.
Can't see anything connecting to the /token endpoint anywhere, guess I'll have to do the fetch() myself.