oidc-provider/lib/response_modes/jwt.js

OAuth 2.0 Authorization Server implementation for Node.js with OpenID Connect

/* eslint-disable camelcase */
import query from './query.js';
import fragment from './fragment.js';
import form_post from './form_post.js';
import web_message from './web_message.js';

const modes = {
  query,
  fragment,
  form_post,
  web_message,
};

const RENDER_MODES = new Set(['form_post', 'web_message']);

export default async function jwtResponseModes(ctx, redirectUri, payload) {
  const { params } = ctx.oidc;

  let mode;
  if (params.response_mode === 'jwt') {
    if (typeof params.response_type === 'string' && params.response_type.includes('token')) {
      mode = 'fragment';
    } else {
      mode = 'query';
    }
  } else {
    ([mode] = params.response_mode.split('.'));
  }

  const { IdToken } = this;
  const token = new IdToken({}, { ctx });
  token.extra = payload;

  const response = await token.issue({ use: 'authorization' });

  if (RENDER_MODES.has(mode)) {
    if ('error' in payload && payload.error !== 'server_error') {
      ctx.status = 400;
    }
  }

  return modes[mode](ctx, redirectUri, { response });
}