0.1.1

package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-openid-connect",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "An nuxt 3 module with OpenID-Connect(OIDC) implemetation",
   "keywords": [
     "nuxt",
@@ -31,6 +31,7 @@
   },
   "dependencies": {
     "@nuxt/kit": "^3.0.0-rc.3",
+    "defu": "^6.0.0",
     "openid-client": "^5.1.6",
     "uuid": "^8.3.2"
   },

src/module.ts

@@ -1,5 +1,6 @@
 import { fileURLToPath } from 'url'
 import { defineNuxtModule, addPlugin, resolveModule, createResolver } from '@nuxt/kit'
+import defu from 'defu'
 import { name, version } from '../package.json'
 
 export type OidcProvider = {
@@ -92,9 +93,16 @@ export default defineNuxtModule<ModuleOptions>({
         route: '/oidc/cbt',
         handler: resolveRuntimeModule('./server/routes/oidc/cbt')
       })
+
+      nitroConfig.externals = defu(typeof nitroConfig.externals === 'object' ? nitroConfig.externals : {}, {
+        inline: [
+          // Inline module runtime in Nitro bundle
+          resolve('./runtime')
+        ]
+      })
     })
 
-    // Context will use in server
+    // openidConnect config will use in server
     nuxt.options.runtimeConfig.openidConnect = {
       ...options as any
     }

src/runtime/server/routes/oidc/callback.ts

@@ -21,7 +21,7 @@ export default defineEventHandler(async (event) => {
   // console.log('received and validated tokens %j', tokenSet)
   // console.log('validated ID Token claims %j', tokenSet.claims())
 
-  console.log(params)
+  // console.log(params)
   if (params.access_token) {
     setCookie(event, 'oidc._access_token', params.access_token, {
       maxAge: 24 * 60 * 60 // one day

src/runtime/server/routes/oidc/user.ts

@@ -1,4 +1,4 @@
-import { useCookie, defineEventHandler } from 'h3'
+import { useCookie, deleteCookie, defineEventHandler } from 'h3'
 import { initClient } from '../../../utils/issueclient'
 import { useRuntimeConfig } from '#imports'
 
@@ -17,10 +17,12 @@ export default defineEventHandler(async (event) => {
       const userinfo = await issueClient.userinfo(accesstoken)
       return userinfo
     } catch (err) {
+      console.log(err)
+      deleteCookie(event, 'oidc._access_token')
       return {}
     }
   } else {
-    console.log('empty userinfo')
+    console.log('empty accesstoken for access userinfo')
     return {}
   }
 })