@quarks/quarks-iam/routes/userinfo.js

A modern authorization server built to authenticate your users and protect your APIs

/**
 * Module dependencies
 */

var oidc = require('../oidc')
var settings = require('../boot/settings')

/**
 * Exports
 */

module.exports = function (server) {
  /**
   * UserInfo Endpoint
   */

  server.get('/userinfo',
    oidc.parseAuthorizationHeader,
    oidc.getBearerToken,
    oidc.verifyAccessToken({
      iss: settings.issuer,
      key: settings.keys.sig.pub,
      scope: 'profile'
    }),
    oidc.getAuthorizedScopes,
    oidc.getUserInfo
  )

  /**
   * UserInfo Update Endpoint
   */

  server.patch('/userinfo',
    oidc.parseAuthorizationHeader,
    oidc.getBearerToken,
    oidc.verifyAccessToken({
      iss: settings.issuer,
      key: settings.keys.sig.pub,
      scope: 'profile'
    }),
    oidc.getAuthorizedScopes,
    oidc.patchUserInfo
  )
}