feat: add OpenID Connect (OIDC) provider

README.md

@@ -236,6 +236,7 @@ It can also be set using environment variables:
 - LinkedIn
 - LiveChat
 - Microsoft
+- OIDC / OpenID Connect (Generic)
 - Okta
 - Ory
 - PayPal
@@ -408,7 +409,7 @@ export default defineWebAuthnRegisterEventHandler({
     // If he registers a new account with credentials
     return z.object({
       // we want the userName to be a valid email
-      userName: z.string().email() 
+      userName: z.string().email()
     }).parse(userBody)
   },
   async onSuccess(event, { credential, user }) {

playground/app/pages/index.vue

@@ -275,6 +275,11 @@ const providers = computed(() =>
       disabled: Boolean(user.value?.ory),
       icon: 'i-custom-ory',
     },
+    {
+      label: user.value?.oidc || 'OIDC',
+      to: '/auth/oidc',
+      disabled: Boolean(user.value?.oidc),
+    },
   ].map(p => ({
     ...p,
     prefetch: false,

playground/server/routes/auth/oidc.ts

@@ -0,0 +1,15 @@
+export default defineOAuthOidcEventHandler({
+  config: {
+    scope: ['openid', 'profile', 'email'],
+  },
+  async onSuccess(event, { user }) {
+    await setUserSession(event, {
+      user: {
+        oidc: user.name,
+      },
+      loggedInAt: Date.now(),
+    })
+
+    return sendRedirect(event, '/')
+  },
+})

playground/shared/types/auth.d.ts

@@ -47,6 +47,7 @@ declare module '#auth-utils' {
     roblox?: string
     okta?: string
     ory?: string
+    oidc?: string
   }
 
   interface UserSession {
@@ -63,4 +64,4 @@ declare module '#auth-utils' {
   }
 }
 
-export {}
+export { }

src/module.ts

@@ -521,5 +521,13 @@ export default defineNuxtModule<ModuleOptions>({
       tokenURL: '',
       userURL: '',
     })
+    // OIDC OAuth
+    runtimeConfig.oauth.oidc = defu(runtimeConfig.oauth.oidc, {
+      clientId: '',
+      clientSecret: '',
+      openidConfig: '',
+      redirectUrl: '',
+      scope: [],
+    })
   },
 })