step 6: UserInfo endpoint

app.js

@@ -3,6 +3,7 @@
  */
 const
   express = require('express'),
+  bearerToken = require('express-bearer-token'),
   session = require('express-session'),
   sessionstore = require('sessionstore'),
   bodyParser = require('body-parser');
@@ -16,12 +17,16 @@ const {
   userAuthorize,
   loginRedirect,
   userToken,
+  userInfo,
 } = require('./controllers/oidcProvider');
 
 const memoryStorage = require('./services/memoryStorage');
 
 const app = express();
 
+// parse request headers and add the bearer token into `res.token` if present:
+app.use(bearerToken());
+
 // Note this enable to store user session in memory
 // As a consequence, restarting the node process will wipe all sessions data
 app.use(session({
@@ -55,6 +60,7 @@ app.get('/logout', localLogout);
 app.get('/user/authorize', userAuthorize);
 app.get('/user/loginRedirect', loginRedirect);
 app.post('/user/token', userToken);
+app.get('/api/user', userInfo);
 
 /**** END OIDC End points ****/
 

controllers/oidcProvider.js

@@ -138,8 +138,27 @@ const userToken = (req, res) => {
   }
 };
 
+const userInfo = (req, res) => {
+  const memoryStorage = req.app.get('memoryStorage');
+
+  if (! req.token) {
+    console.error('Unauthorized: missing access Token');
+    return res.sendStatus(401);
+  }
+
+  const data = memoryStorage.find('tokens', req.token);
+
+  if (! data) {
+    console.error('Unauthorized: no matching accessToken found');
+    return res.sendStatus(403);
+  }
+
+  return res.json(data);
+};
+
 module.exports = {
   userAuthorize,
   loginRedirect,
   userToken,
+  userInfo,
 }

package.json

@@ -8,6 +8,7 @@
   "dependencies": {
     "ejs": "^2.6.1",
     "express": "^4.16.3",
+    "express-bearer-token": "^2.4.0",
     "express-session": "^1.15.6",
     "njwt": "^1.0.0",
     "node-csv-query": "^0.1.0",