Re: [aerogear-dev] Node.js / Passport.js thoughts (was: Re: OAuth2, OpenID connect and AeroGear)

On Nov 3, 2014 1:53 AM, "Corinne Krych" <corinnekrych(a)gmail.com&gt; wrote: wrote: wrote: technologies client SDKs do work against node.js (w/ passport.js), how about we build a Node.js based version of our "Shoot-n-Share backend" ([1]), that is protected by Passport.js? passport is, it is not an OAuth2 server thing. java weenies) for express.js, and by using adapters(like a FB or google), it can secure RESTful endpoints in that express.js app. connect (on top of oauth2). you login as google user and your secure your endpoint with google access token. token on server side. Refresh and access token are never stored in browser app. The browser will include the returned oauth2 token with ever request to establish authorization. This token /may/ be stored as a cookie or in local storage to facilitate that until the user logs out. A number of paaport.js extensions exist providing a simplified api for dealing with a particular oauth implementation, eg: https://github.com/jaredhanson/passport-google-oauth A module integrating passport with keycloak might indeed be interesting. Certainly augmenting the demo to show they play nice together should be useful. Brian device… not sure there is anything interesting to demo on native app, it’s more a web or cordova thing. I would say either use key cloak/passport Js for web pure app and corodva app or use corodva native oauth2 plugin. passport, using the OAuth2 protocol( similar to passports FB and google adapters ); with KC or an Oauth2 server. see [1], [2] http://scottksmith.com/blog/2014/07/02/beer-locker-building-a-restful-api... Luke, our Node.js pro, it would be a fairly simple task :) simply offer a new upload target for Passport.js, instead of 'just' FB, Google-Drive and Keycloak. different, similar to what we learned on how Google/FB are different ;-) release our OAuth2 SDKs, it would be awesome to actually ship a node.js based demo as well, instead of just a Java-based backend demo. That would clearly show, our client libs are working across different backend technologies. https://github.com/aerogear/aerogear-backend-cookbook/tree/master/Shoot http://transcripts.jboss.org/meeting/irc.freenode.org/aerogear/2014/aerog...