Core ID

Provides SSO functionality through the OpenID Connect flow.

Environment Variables

NODE_APP_DEVELOPERPORTALDOMAIN - the domain of the developer portal to use when redirecting. Defaults to "https://ci-developer.condenast.io"

NODE_APP_PORT - the port to run on. Defaults to 8080.

NODE_APP_GATEWAYHOSTNAME - The hostname of the core gateway to use for auth. Defaults to "ci-api.condenast.io"

NODE_APP_HTTP_TIMEOUT - The timeout, in milliseconds, for the provider to wait for HTTP requests to complete. Defaults to 15000.

NODE_APP_ISSUER - The host where the issuer operates. Should equal the externally available hostname. Defaults to "http://localhost:8080"

NODE_DB_CONNECTION_USER - The username to use when connecting to Postgres. Defaults to "postgres".

NODE_DB_CONNECTION_HOST - The Postgres hostname. Defaults to "localhost".

NODE_DB_CONNECTION_DATABASE - The Postgres database to use when querying. Defaults to "core-id".

NODE_ENV - The environment. Defaults to "development".

NODE_OIDC_FEATURES_REGISTRATION - A Boolean ("true" or "false") determining whether the OIDC provider supports dynamic registration. Defaults to "false".

NODE_OIDC_TTL_ACCESSTOKEN - The TTL of the access token in seconds. Defaults to 3600.

NODE_OIDC_TTL_AUTHORIZATIONCODE - The TTL of the authorization code in seconds. Defaults to 600.

NODE_OIDC_TTL_CLIENTCREDENTIALS - The TTL of client credentials in seconds. Defaults to 600.

NODE_OIDC_TTL_IDTOKEN - The TTL of the ID token in seconds. Defaults to 3600.

NODE_OIDC_TTL_REFRESHTOKEN - The TTL of the refresh token in seconds. Defaults to 86400.

NODE_OIDC_TTL_REGISTRATIONACCESSTOKEN - The TTL of the registration access token in seconds. Defaults to 3600.

NODE_OIDC_CLOCKTOLERANCE - The amount of clock difference (in seconds) the provider is willing to accept between a Relying Party and itself

NODE_APP_TOKEN_MONITOR_TIMEOUT - Timeout in milliseconds to wait between polling for unconsumed tokens

Metrics

metric name	description
coreid.authentication.count	Number of successful or unsuccessful authentications
coreid.events.token.count	Number of token events emitted by provider
coreid.events.error.count	Number of error events emitted by provider
coreid.events.success.count	Number of success events emitted by provider
coreid.tokens.unconsumed.count	Number of unconsumed tokens

Certificates

If for any reason we need to generate new certificates, there is a script here to assist with that.