Class OAuthEnvironmentHandler

Once the user signs in or consents in the OAuth screen, the auth provider redirects to the callbackURL which is handled by this method.

Request

• to contain a nonce cookie and a 'state' query parameter Response
• postMessage to the window with a payload that contains accessToken, expiryInSeconds?, idToken? and scope.
• sets a refresh token cookie if the auth provider supports refresh tokens

(Optional) Handles sign out requests

Response

• removes the refresh token cookie

(Optional) If the auth provider supports refresh tokens then this method handles requests to get a new access token.

Other types of providers may also use this method to implement its own logic to create new sessions upon request. For example, this can be used to create a new session for a provider that handles requests from an authenticating proxy.

Request

• to contain a refresh token cookie and scope (Optional) query parameter. Response
• payload with accessToken, expiryInSeconds?, idToken?, scope and user profile information.

Handles the start route of the API. This initiates a sign in request with an auth provider.

Request

• scopes for the auth request (Optional) Response
• redirect to the auth provider for the user to sign in or consent.
• sets a nonce cookie and also pass the nonce as 'state' query parameter in the redirect request