Skip to content

Latest commit

 

History

History
25 lines (20 loc) · 991 Bytes

README.md

File metadata and controls

25 lines (20 loc) · 991 Bytes

heimdall

Implicit OpenID Connect (OIDC) and OAuth 2.0 Provider with opinionated identity management.

heimdall is heavily focused on providing authentication and authorization mechanism to SPAs by generating id_token and access_token via implicit flow.

Roadmap

There are some missing functionality that should be implemented before v1.0.

  • Split handlers into multiple classes (or files)
  • Decision about custom scopes and claims
  • Implement todos written in comments
  • Extract account management code
  • Add mongodb store
  • Add memory store
  • Decision about configurable parameters
  • Pass configuration from YAML files
  • Convert parseAuthorization function to a middleware
  • Silent callback
  • Api resource scopes
  • Create sample app repository
  • Encrypt provider access_token in mongodb
  • Add logging
  • Add proper documentation and explain the decisions made (e.g. why there is no consent)