@relykit/oidc
v0.1.2
Published
Provider-neutral, framework-independent OpenID Connect primitives for relying applications.
Maintainers
Readme
@relykit/oidc
Provider-neutral, framework-independent OpenID Connect primitives for server-side relying applications.
The package implements discovery, Authorization Code flow with S256 PKCE, state and nonce validation, token verification, optional UserInfo, configurable token-endpoint client authentication, structured state-bound RP-initiated logout requests with token-sensitive transport selection, safe return paths, and pure access decisions.
Provider-specific claims are handled by an application-supplied IdentityProfileStrategy. Application users, roles, permissions, and persistence remain outside this package.
See the repository README and configuration guide for setup and security requirements.
