Nuxt OIDC Auth Starter

Nuxt authentication starter for Tuurio ID with protected server routes and standards-based OpenID Connect.

Generated from Tuurio/auth_samples/auth_samples_nuxt. Submit implementation fixes upstream so they are not replaced by the next synchronized release.

What you get

• Standards-based OpenID Connect authentication with framework-native integration.
• Exact redirect and post-logout redirect handling.
• Protected-route and logout examples.
• A reviewed, pinned Tuurio provisioning workflow.

Quickstart

1. Create a repository with Use this template or clone this repository.
2. Follow the framework-specific prerequisites below.
3. Review and run this pinned provisioning command:

npx manage-tuurio-id@1.1.6 init --framework nuxt --project-dir . --auth browser --yes --output json --campaign github_nuxt --no-open --no-wait

4. Approve the exact command, then complete the secure browser handoff yourself.
5. Run the build and verify one real sign-in and sign-out.

Never paste credentials, client secrets, authorization codes, tokens, session cookies, or environment-file contents into an agent chat. Browser and native applications are public clients and must not contain a client secret.

Runtime and verification

• Runtime: Node.js 24.11+
• Package manager: npm
• Verification: npm ci && npm run typecheck && npm run build

Security model

This starter uses OpenID Connect Authorization Code flow. Browser and native clients use PKCE S256 and contain no client secret. Redirect and post-logout redirect URIs must match exactly. Identity comes from the established OIDC integration or an authenticated UserInfo request; decoded JWT payloads are never treated as validation. Keep generated local environment files ignored and never commit tokens or credentials.

Framework instructions

Nuxt OIDC authentication with Tuurio ID

Nuxt server starter with Authorization Code + PKCE S256, validated ID tokens and UserInfo subject binding, opaque server sessions, protected pages, and RP-initiated logout.

npx manage-tuurio-id@1.1.6 init --framework nuxt --project-dir . --auth browser --yes --output json --campaign github_nuxt --no-open --no-wait
npm install
npm run dev

Replace the in-memory session and transaction stores with a shared server-side store before horizontal scaling. Client secrets and tokens never enter Vue client code.

License

Licensed under the Apache License, Version 2.0. See LICENSE.