authie

A small JavaScript OAuth/OpenID Connect client library

Relevant docs

• Microsoft identity platform and OAuth 2.0 authorization code flow
• RFC 7636 - Proof Key for Code Exchange
• RFC 6819 - OAuth 2.0 Threat Model and Security Considerations
• DRAFT - OAuth 2.0 Security Best Current Practice

Required DOM APIs

TODO: Check MDN for polyfills too

• Uint8Array
• atob/btoa
• crypto.getRandomValues
• crypto.subtle.digest
• String.fromCharCode
• URL/URLSearchParams
  • Requires fetch also understand URLSearchParams
• fetch
• Promise
• TextEncoder