plugin-oidc

A basic GraphQL Yoga plugin that adds functionality to authorize users using an OpenID Connect compatible service.

How does it work?

This plugin checks an access token from the Authentication header with an OpenID Connect compatible server to verify if it's valid using the introspect endpoint. Additionally, it passes back the response info, which includes information like the preferred_username, scope, email, etc. The provided information can then be used in the GraphQL Yoga server to identify users, such as storing them in a database based on ID.

Example

Please see here for an example of how to use the project.

Credits

Disclaimer: This plugin was based off of the plugin-jwt source code.

• GraphQL Yoga
• keycloak-backend
• plugin-jwt