Choose a Node OIDC library

[mrjones-plip]

Describe the issue
For 9735 we need to have a native JS library we use so we're not re-inventing the wheel for a problem that is known to be well solved

Describe the improvement you'd like
research best in class existing solutions for have a JS app make OIDC calls. show candidates and reasons for selecting the final choice

Describe alternatives you've considered
DIY Not invented here 😢

[Kymoraa]

Hello @mrjones-plip and @jkuester
I have shared my findings on this doc: https://docs.google.com/document/d/1TP4U6guOC-uaNZ3IYlZ4Gdn5fHygjrWIabywo86nGGs/edit?usp=sharing
Let me know if I am on the right path.

[mrjones-plip]

@Kymoraa - this looks great - thanks for sharing your current status of research.

it looks like you propose openid-client and cite some solid reasons. Sounds good!

@jkuester - thoughts on how to see this ticket through to be closed? I was thinking maybe a next step would be to do some proof of concept code to show how this library might be used? An extra bonus would be to stand up an instance of Keycloak and document making API calls against that?

[jkuester]

Honestly, I think @Kymoraa's doc spells everything out very well. My vote is that we commit to moving forwards with openid-client and just close this issue! The openid-client seems to fit our needs with no obvious downsides, so I say we just move on to implementing the feature!

[mrjones-plip]

Sounds good to me!