feat: add OpenID Connect (OIDC) provider (#444)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Sébastien Chopin <atinux@gmail.com>

Author: 3 people

README.md

@@ -236,6 +236,7 @@ It can also be set using environment variables:
 - LinkedIn
 - LiveChat
 - Microsoft
+- OIDC / OpenID Connect (Generic)
 - Okta
 - Ory
 - PayPal
@@ -420,7 +421,7 @@ export default defineWebAuthnRegisterEventHandler({
     // If he registers a new account with credentials
     return z.object({
       // we want the userName to be a valid email
-      userName: z.string().email() 
+      userName: z.string().email()
     }).parse(userBody)
   },
   async onSuccess(event, { credential, user }) {

playground/app/pages/index.vue

@@ -281,6 +281,12 @@ const providers = computed(() =>
       disabled: Boolean(user.value?.shopifyCustomer),
       icon: 'i-simple-icons-shopify',
     },
+    {
+      title: user.value?.oidc || 'OIDC',
+      to: '/auth/oidc',
+      disabled: Boolean(user.value?.oidc),
+      icon: 'i-simple-icons-openid',
+    },
   ].map(p => ({
     ...p,
     prefetch: false,

playground/server/routes/auth/oidc.ts

@@ -0,0 +1,15 @@
+export default defineOAuthOidcEventHandler({
+  config: {
+    scope: ['openid', 'profile', 'email'],
+  },
+  async onSuccess(event, { user }) {
+    await setUserSession(event, {
+      user: {
+        oidc: user.name,
+      },
+      loggedInAt: Date.now(),
+    })
+
+    return sendRedirect(event, '/')
+  },
+})

playground/shared/types/auth.d.ts

@@ -47,6 +47,7 @@ declare module '#auth-utils' {
     roblox?: string
     okta?: string
     ory?: string
+    oidc?: string
   }
 
   interface UserSession {

src/module.ts

@@ -1,22 +1,22 @@
-import { writeFile, readFile } from 'node:fs/promises'
+import type { ScryptConfig } from '@adonisjs/hash/types'
 import {
-  defineNuxtModule,
-  addPlugin,
-  createResolver,
+  addComponentsDir,
   addImports,
+  addPlugin,
   addServerHandler,
-  addServerPlugin,
   addServerImportsDir,
-  addComponentsDir,
+  addServerPlugin,
+  createResolver,
+  defineNuxtModule,
   logger,
 } from '@nuxt/kit'
-import { join } from 'pathe'
 import { defu } from 'defu'
-import { randomUUID } from 'uncrypto'
-import type { ScryptConfig } from '@adonisjs/hash/types'
 import type { SessionConfig } from 'h3'
-import { atprotoProviderDefaultClientMetadata, atprotoProviders, getClientMetadataFilename } from './runtime/utils/atproto'
+import { readFile, writeFile } from 'node:fs/promises'
+import { join } from 'pathe'
+import { randomUUID } from 'uncrypto'
 import type { AtprotoProviderClientMetadata } from './runtime/types/atproto'
+import { atprotoProviderDefaultClientMetadata, atprotoProviders, getClientMetadataFilename } from './runtime/utils/atproto'
 
 // Module options TypeScript interface definition
 export interface ModuleOptions {
@@ -530,5 +530,13 @@ export default defineNuxtModule<ModuleOptions>({
       redirectURL: '',
       scope: [],
     })
+    // OIDC OAuth
+    runtimeConfig.oauth.oidc = defu(runtimeConfig.oauth.oidc, {
+      clientId: '',
+      clientSecret: '',
+      openidConfig: '',
+      redirectURL: '',
+      scope: [],
+    })
   },
 })