The Final SPA implements its OpenID Connect security using a Token Handler.
This design pattern requires extra components to support the SPA.
A local token handler must be run in a sibling domain of the SPA, where domains are added to the hosts file.
This ensures that SameSite cookies issued by the token handler work properly in browsers:
Component | URL |
---|---|
SPA | https://web.authsamples-dev.com/spa |
OAuth Agent | https://localtokenhandler.authsamples-dev.com/oauth-agent |
API Public URL | https://localtokenhandler.authsamples-dev.com/api |
The build script is called by the SPA's build.sh
script to ensure that the token handler is ready to deploy.
The deploy script is called when the SPA's deploy.sh
script is executed.
The result is that the OAuth Agent API and an API Gateway with an OAuth Proxy run in Docker.