first commit

src/middleware/oidcMiddleware.js

@@ -46,13 +46,15 @@ export function getOIDCClient() {
 export function getAuthorizationUrl(req) {
   const client = getOIDCClient();
   const nonce = Math.random().toString(36).substring(7);
+  const state = Math.random().toString(36).substring(7);
   req.session.nonce = nonce;
+  req.session.state = state;
 
   return client.authorizationUrl({
     scope: 'openid profile email',
     response_mode: 'form_post',
     nonce,
-    state: Math.random().toString(36).substring(7),
+    state,
   });
 }
 
@@ -65,6 +67,7 @@ export async function handleCallback(req) {
 
   const tokenSet = await client.callback(config.oidc.redirectUri, params, {
     nonce: req.session.nonce,
+    state: req.session.state,
   });
 
   const userInfo = await client.userinfo(tokenSet);

src/server.js

@@ -54,6 +54,7 @@ async function initialize() {
 }
 
 // Middleware
+app.trust('proxy');
 app.use(requestLogger);
 app.use(securityHeaders);
 app.use(bodyParser.json({ limit: '10mb' }));