How to access ID Token?

[zachsa]

When requesting the openid scope, how does one get the ID token back?

My understanding is that the callback passed to the strategy constructor is passed these params:

accessToken, refreshToken, profile, cb

But documentation for Hydra makes me think there should also be an ID token passed in some cases: https://www.ory.sh/hydra/docs/concepts/openid-connect-oidc/

[pommelinho]

Actually this is possible, you can pass a function with 5 instead of 4 params

async function userAuthenticationByOAuthKeyCloakStrategy(
  accessToken,
  refreshToken,
  params,
  profile,
  done,
) {

you can then access params.id_token

[zachsa]

I didn't know that - and I don't think it was documented? I changed to a different library: openid-client. There's a nice example getting it to work with passport: https://codeburst.io/how-to-implement-openid-authentication-with-openid-client-and-passport-in-node-js-43d020121e87

[pommelinho]

Hey,

no I also did not found it in the doc. Searched for it in the code ;-)