Extending oauth2orize-openid

[rainierwolfcastle]

Hi,

I need an OIDC server for a project I'm working on and rather than start from scratch I thought I'd reuse yours. I'm guessing the server grant flows are correct and that all I'd need to do is find someway to override the exchange flow (i.e. oauth2orize.exchange.code()) to return a id_token, access token etc. rather than just an access token. Is this correct? Could you give me a few pointers on what I should do?

Thanks,
Robert

[lucasad]

In the callback to oauth2orize.exchange.code, the done callback can take 3 parameters (besides the error), call it like done(null, access_token, refresh_token, {id_token: id_token})