OIDC Authentication Service
A backend authentication service exploring secure token issuance and public-key discovery.
Role
Backend Developer
Timeline
Personal project
Project type
Personal work
Technologies
9 technologies
01 / Overview
The project
A TypeScript and Node.js authentication service built around RS256-signed JWTs, a JWKS endpoint, request validation, and PostgreSQL persistence.
02 / Challenge
The problem
Authentication services need a consistent approach to token issuance, verification, validation, and public-key distribution.
03 / Approach
The solution
Built a backend service using RS256-signed JWTs and a JWKS endpoint, with PostgreSQL persistence and schema-based request validation.
04 / Engineering
My contributions
- Implemented backend routes using Node.js and Express.
- Worked with PostgreSQL through Drizzle ORM.
- Implemented RS256-based JWT signing and verification.
- Exposed a JWKS endpoint for public-key discovery.
- Used Zod for request validation.
05 / Technical details
Engineering highlights
- Asymmetric JWT signing using RS256.
- Public-key discovery through a JWKS endpoint.
- Typed database access with Drizzle ORM.
- Schema-based validation using Zod.
06 / Technology
Built with
07 / Outcome
What came out of it.
Deployed and accessible, this project demonstrates backend authentication concepts and API engineering. Its exact protocol capabilities should be evaluated against the implemented endpoints rather than inferred from its name.
Explore more projects