Does API Bearer Authentication support use OIDC Token for authentication?

[ufan0]

I used to use cookies for authentication, but now I have a central IdP (like Auth0), and all user data will be provided by the IdP.

I checked this document: https://docs.nodebb.org/api/read/#section/Overview/Authentication, and I tried using the IdP OIDC token as Bearer Authentication, but it failed.

So, I want to know if this is possible. Maybe I made a mistake.

Thank you, and I guess everyone can't wait to see version 4.

[julian]

@ufan0 as you discovered, you cannot use an access token in NodeBB's bearer authentication mechanism.

When a user registers using your central IdP, you could use an existing master token to create a user-specific token for them using POST /users/{uid}/tokens, and use that generated token going forward for API requests.

[ufan0]

@julian Thanks for your answer, this means I need to add a backend service.