Express OpenID Connect Middleware

import express from 'express';
import { auth, requiresAuth } from 'express-openid-connect';
import dotenv from 'dotenv';

dotenv.config(); // Load environment variables from .env file

const app = express();
const port = process.env.PORT || 3000;

const config = {
  authRequired: false,
  auth0Logout: true,
  secret: process.env.SECRET ?? 'a-very-long-random-string-that-is-at-least-32-characters-long',
  baseURL: process.env.BASE_URL ?? `http://localhost:${port}`,
  clientID: process.env.CLIENT_ID ?? 'YOUR_AUTH0_CLIENT_ID',
  issuerBaseURL: process.env.ISSUER_BASE_URL ?? 'https://YOUR_AUTH0_DOMAIN',
  // Uncomment and configure a session store for production environments
  // session: {
  //   store: new MemoryStore({ checkPeriod: 86400000 })
  // }
};

// Attach /login, /logout, and /callback routes to the baseURL
app.use(auth(config));

// Basic route, checks if user is authenticated
app.get('/', (req, res) => {
  res.send(
    `<h1>Welcome</h1><p>${
      req.oidc.isAuthenticated() ? 'Logged in' : 'Logged out'
    }</p><a href="/login">Login</a> | <a href="/profile">Profile</a> | <a href="/logout">Logout</a>`
  );
});

// The /profile route requires authentication
app.get('/profile', requiresAuth(), (req, res) => {
  res.send(
    `<h2>User Profile</h2><pre>${JSON.stringify(req.oidc.user, null, 2)}</pre><a href="/">Home</a>`
  );
});

// Example of a public route that does not require authentication
app.get('/public', (req, res) => {
  res.send(`
    <h1>Public Page</h1>
    <p>User is ${req.oidc.isAuthenticated() ? 'authenticated' : 'not authenticated'}.</p>
    <a href="/">Home</a>
  `);
});

app.listen(port, () => {
  console.log(`Server running on http://localhost:${port}`);
  console.log('Remember to set ISSUER_BASE_URL, CLIENT_ID, BASE_URL, and SECRET environment variables.');
  console.log('Also, configure "Allowed Callback URLs" and "Allowed Logout URLs" in Auth0 to match your BASE_URL.');
});