@qsxlpublic/passport-linkedin-oauth2
v3.0.0-qsxl.1.0.2
Published
Passport for LinkedIn OAuth2 API v2
Downloads
42
Readme
A QSXL fork of LinkedIn OAuth2 Strategy including ""Community Management API" fix and types.
Install
npm install @qsxlpublic/passport-linkedin-oauth2 yarn add @qsxlpublic/passport-linkedin-oauth2
1. Usage
Register the strategy
1. Example for "Share on LinkedIn"
var LinkedInStrategy = require("passport-linkedin-oauth2").Strategy;
passport.use(
new LinkedInStrategy(
{
clientID: LINKEDIN_KEY,
clientSecret: LINKEDIN_SECRET,
callbackURL: "http://127.0.0.1:3000/auth/linkedin/callback",
scope: ["email", "profile", "openid"],
},
function (accessToken, refreshToken, profile, done) {
// asynchronous verification, for effect...
process.nextTick(function () {
// To keep the example simple, the user's LinkedIn profile is returned to
// represent the logged-in user. In a typical application, you would want
// to associate the LinkedIn account with a user record in your database,
// and return that user instead.
return done(null, profile);
});
}
)
);
2. Exmample for "Community Management API"
var LinkedInStrategy = require("passport-linkedin-oauth2").Strategy;
passport.use(
new LinkedInStrategy(
{
clientID: LINKEDIN_KEY,
clientSecret: LINKEDIN_SECRET,
callbackURL: "http://127.0.0.1:3000/auth/linkedin/callback",
scope: ["r_basicprofile"], // 'profile', 'openid' scope will not work for "Community Management API"
},
function (accessToken, refreshToken, profile, done) {
// asynchronous verification, for effect...
process.nextTick(function () {
// To keep the example simple, the user's LinkedIn profile is returned to
// represent the logged-in user. In a typical application, you would want
// to associate the LinkedIn account with a user record in your database,
// and return that user instead.
return done(null, profile);
});
}
)
);
and then authenticate as:
app.get("/auth/linkedin", passport.authenticate("linkedin", { state: "SOME STATE" }), function (req, res) {
// The request will be redirected to LinkedIn for authentication, so this
// function will not be called.
});
the login callback:
app.get(
"/auth/linkedin/callback",
passport.authenticate("linkedin", {
successRedirect: "/",
failureRedirect: "/login",
})
);
See this for details on LinkedIn API.
Auto-handle state
param
The state
param is used to prevent CSRF attacks, and is required by the LinkedIn API. You can ask Passport to handle the sending and validating of the state
parameter by passing state: true
as an option to the strategy:
var LinkedInStrategy = require("passport-linkedin-oauth2").Strategy;
passport.use(
new LinkedInStrategy(
{
clientID: LINKEDIN_KEY,
clientSecret: LINKEDIN_SECRET,
callbackURL: "http://127.0.0.1:3000/auth/linkedin/callback",
scope: ["email", "profile", "openid"],
state: true,
},
function (accessToken, refreshToken, profile, done) {
// asynchronous verification, for effect...
process.nextTick(function () {
// To keep the example simple, the user's LinkedIn profile is returned to
// represent the logged-in user. In a typical application, you would want
// to associate the LinkedIn account with a user record in your database,
// and return that user instead.
return done(null, profile);
});
}
)
);
and then authenticate as:
app.get("/auth/linkedin", passport.authenticate("linkedin"), function (req, res) {
// The request will be redirected to LinkedIn for authentication, so this
// function will not be called.
});
Issue Reporting
If you have found a bug or if you have a feature request, please report them at this repository issues section. Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.
Author
License
This project is licensed under the MIT license. See the LICENSE file for more info.