Sending user id or data back with the token?

[JonathanBristow]

How can I include the userId or a user object in the token which gets sent back to the client?

[soulchild]

Set allowExtendedTokenAttributes: true when creating your OAuthServer instance:

const OAuthServer = require('express-oauth-server');
const oAuthModel = require('my-oauth-model');
const oAuth = new OAuthServer({
  model: oAuthModel,
  allowExtendedTokenAttributes: true
});

Then you can add whatever you want to the object returned from your oAuthModel's saveToken function (id_token in this example). This could also be a JSONWebToken.

exports.saveToken = (token, client, user) => 
  OAuthToken.create({...}).then(newToken) => ({
    accessToken: newToken.accessToken,
    accessTokenExpiresAt: newToken.accessTokenExpiresAt,
    refreshToken: newToken.refreshToken,
    refreshTokenExpiresAt: newToken.refreshTokenExpiresAt,
    scope: newToken.scope,
    client: { id: newToken.OAuthClientId },
    user: { id: newToken.UserId },
    id_token: { 
      user: {
        id: 123,
        name: 'John Doe'
      },
    }
  });