MANTENN/adonis-ally-azure-ad

AdonisJS Ally x Azure AD

Azure AD ally driver for AdonisJS ally.

PKCE Auth Workflow

PKCE is like a client-side CSRF token to prevent token hijack attacks.

Since the code is synchronus and the context,

this.ctx

is asynchronus, I was not able to implement PKCE flow into the Azure Active Directory library.

As of now, the best way to handle PKCE is to grab them from the route handler and pass them through the callbacks Ex: // 2. Get Profile` Route.get('/azure-active-directory/callback', async ({ request, ally, response }) => { const pkceTokenRequestSchema = schema.create({ code: schema.string(), codeVerifier: schema.string(), redirectUri: schema.string.optional(), }) const { code, codeVerifier, redirectUri } = await request.validate({ schema: pkceTokenRequestSchema, })

  // need to grab token
  const azureActiveDirectory = ally.use('activedirectory')

  if (azureActiveDirectory.accessDenied()) {
    return 'Access Denied'
  }

  if (azureActiveDirectory.stateMisMatch()) {
    return 'Request expired. Try again.'
  }

  if (azureActiveDirectory.hasError()) {
    return azureActiveDirectory.getError()
  }

  // need to automate the way user works to hook into and grab the PKCE info from the driver
  const user = await azureActiveDirectory.user((request) => {
    request.field('code', code)
    request.field('code_verifier', codeVerifier)
  })
  // kinda useless because the data isn't forwarded
  if (redirectUri) response.redirect(redirectUri)
  return user
  // no need to store user unless we plan on doing notifcations
})

Guides | Benchmarks

_{Built with ❤︎ by Alexander Wennerstrøm}