{ "edges": [], "nodes": [ { "id": "da0c6b83-9c8c-431b-beaa-66b5343b21c5", "name": "Webhook", "type": "trigger", "params": { "kind": "n8n-nodes-base.webhook", "path": "891ad1cd-6a50-4a88-8789-95680c78f14c", "options": {}, "responseMode": "responseNode" }, "position": [ 80, 680 ] }, { "id": "5c9d4f59-7980-4bee-8df6-cf9ca3eccde1", "name": "Code", "type": "code", "params": { "jsCode": "let myCookies = {};\nlet cookies = [];\n\ncookies = $input.item.json.headers.cookie.split(';')\nfor (item of cookies ) {\n myCookies[item.split('=')[0].trim()]=item.split('=')[1].trim();\n}\n\nreturn myCookies;" }, "position": [ 520, 680 ] }, { "id": "7867d061-c0e3-4359-90ac-a4536c948db2", "name": "user info", "type": "http", "params": { "url": "{{ $env.BASE_URL }}", "options": {}, "sendHeaders": true, "headerParameters": { "parameters": [ { "name": "Authorization", "value": "=Bearer {{ $json['access_token'] }}" } ] } }, "position": [ 1220, 760 ] }, { "id": "df0e9896-0670-49cc-b7c6-140c234036b4", "name": "send back login page", "type": "passthrough", "params": { "mode": "noOp", "options": {}, "respondWith": "text", "responseBody": "={{ $json.html }}" }, "position": [ 1900, 980 ] }, { "id": "81f03c86-91fe-4960-b4c4-295252c7e8fc", "name": "IF token is present", "type": "if", "params": { "conditions": { "number": [ { "value1": "={{ $json['access_token'] }}", "operation": "isNotEmpty" } ] } }, "position": [ 940, 820 ] }, { "id": "5e2f87bd-9c1f-4e87-82df-1b3b3e98cbdb", "name": "Welcome page", "type": "passthrough", "params": { "html": "\n\n\n\n \n My HTML document\n\n\n

Welcome {{$('user info').item.json.email }}

\n\n\n\n\n", "mode": "noOp" }, "position": [ 1720, 660 ] }, { "id": "c1448e12-4292-402b-bf9d-0ab555bbc734", "name": "send back welcome page", "type": "passthrough", "params": { "mode": "noOp", "options": {}, "respondWith": "text", "responseBody": "={{ $json.html }}" }, "position": [ 1920, 660 ] }, { "id": "8e64ab13-4f23-4c85-a625-c456910a9472", "name": "IF user info ok", "type": "if", "params": { "conditions": { "number": [ { "value1": "={{ $json.email }}", "operation": "isNotEmpty" } ] } }, "position": [ 1400, 760 ] }, { "id": "a96b170f-fbd8-4061-9619-bf9877e85495", "name": "login form", "type": "passthrough", "params": { "html": "\n\n\n \n \n Login\n \n \n \n

\n \n \n", "mode": "noOp" }, "position": [ 1700, 980 ] }, { "id": "6e3afc62-52a9-402a-bde9-e8798d0fd4f6", "name": "Set variables : auth, token, userinfo, client id, scope", "type": "set", "params": { "values": { "string": [ { "name": "auth_endpoint", "value": "Your value here" }, { "name": "token_endpoint", "value": "Your value here" }, { "name": "userinfo_endpoint", "value": "Your value here" }, { "name": "client_id", "value": "name of your client" }, { "name": "scope", "value": "openid" }, { "name": "redirect_uri", "value": "webhook uri" }, { "name": "client_secret", "value": "secret of your client" } ], "boolean": [ { "name": "PKCE", "value": true } ] }, "options": {} }, "position": [ 320, 680 ] }, { "id": "2d54c64a-ae45-480f-923f-63d6cb3fcdfc", "name": "IF we have code in URI and not in PKCE mode", "type": "if", "params": { "conditions": { "string": [ { "value1": "={{ $('Webhook').item.json.query.code }}", "operation": "isNotEmpty" } ], "boolean": [ { "value1": "={{ $('Set variables : auth, token, userinfo, client id, scope').item.json.PKCE }}" } ] } }, "position": [ 700, 680 ] }, { "id": "99c8fa5d-3173-4371-9742-6014eca6e7fe", "name": "get access_token from /token endpoint with code", "type": "http", "params": { "url": "{{ $env.BASE_URL }}", "method": "POST", "options": {}, "sendBody": true, "contentType": "form-urlencoded", "bodyParameters": { "parameters": [ { "name": "grant_type", "value": "authorization_code" }, { "name": "client_id", "value": "={{ $('Set variables : auth, token, userinfo, client id, scope').item.json.client_id }}" }, { "name": "client_secret", "value": "={{ $('Set variables : auth, token, userinfo, client id, scope').item.json.client_secret }}" }, { "name": "code", "value": "={{ $('Webhook').item.json.query.code }}" }, { "name": "redirect_uri", "value": "={{ $('Set variables : auth, token, userinfo, client id, scope').item.json.redirect_uri }}" } ] } }, "position": [ 940, 640 ] } ] }

OIDC Authentication Handler and Login Flow