Usage in RESTful API bearer only mode

[eugeniosegala]

Hi!

I have noticed that the Strategy that it being offered as a part of node-openid-client requires a session to work.

I think this is perfectly fine for stateful services however it will not work for steteless Node JS APIs where a session is not present.

I have seen other less popular libraries solving this problem in combination with Passport.

It this possible at all with node-openid-client?

Maybe there are other helpers/approaches which I'm missing.

Thanks!

[panva]

This is a login strategy, not an API bearer strategy. https://www.npmjs.com/package/express-oauth2-jwt-bearer might be what you're looking for if your access tokens are in the JWT format.