MishkaCmsCore.Accounts.ProviderStrategy (Mishka CMS Core v0.0.1)

One AshAuthentication strategy for every sign-in provider, whichever the installed plugins are: the core names none of them.

Modelled on AshAuthentication's own dynamic_oidc, with the provider coming from a mishka_installer plugin (MishkaCmsCore.Accounts.SignInProvider) instead of a database row, and any Assent provider rather than OpenID Connect alone. At a request, MishkaCmsCore.Accounts.ProviderStrategy.Plug finds the plugin the path names, fills this struct with its Assent strategy, Assent's own defaults for it and the site's keys, and hands it to AshAuthentication's OAuth2.Plug, which does the sign-in. The provider's id is the connection id, so each provider's identities are kept apart ("provider/<id>").

authentication do
  strategies do
    sign_in_providers :provider do
      identity_resource MishkaCmsCore.Accounts.UserIdentity
      register_action_name :register_with_provider
    end
  end
end

Its routes, under the host's auth mount: /user/provider/:provider/request starts a sign-in, and /user/provider/callback is where every provider sends the visitor back — the provider the sign-in started with waits in the session, as dynamic_oidc keeps its connection.

Summary

Types

t()

Types

t()

@type t() :: %MishkaCmsCore.Accounts.ProviderStrategy{
  __connection_id__: term(),
  __spark_metadata__: term(),
  assent_strategy: term(),
  auth_method: term(),
  authorization_params: term(),
  authorize_url: term(),
  base_url: term(),
  client_authentication_method: term(),
  client_id: term(),
  client_secret: term(),
  code_verifier: term(),
  email_field: term(),
  icon: term(),
  id_token_signed_response_alg: term(),
  id_token_ttl_seconds: term(),
  identity_relationship_name: term(),
  identity_relationship_user_id_attribute: term(),
  identity_resource: term(),
  idp_initiated_login?: term(),
  name: term(),
  nonce: term(),
  on_untrusted_email_match: term(),
  openid_configuration: term(),
  openid_configuration_uri: term(),
  openid_default_scope: term(),
  prevent_hijacking?: term(),
  private_key: term(),
  private_key_id: term(),
  private_key_path: term(),
  provider: term(),
  redirect_uri: term(),
  register_action_name: term(),
  registration_enabled?: term(),
  resource: term(),
  session_identifier: term(),
  sign_in_action_name: term(),
  site: term(),
  strategy_module: term(),
  team_id: term(),
  token_url: term(),
  trust_email_verified?: term(),
  trusted_audiences: term(),
  user_url: term(),
  warn_on_missing_identity_resource?: term()
}