https://github.com/curityio/openid-client-android-appauth-dcr
Extended OpenID Connect Android integration in a Kotlin app using the AppAuth pattern and Dynamic Client Registration
https://github.com/curityio/openid-client-android-appauth-dcr
android appauth code-example dynamic-client-registration mobile oauth2 openid-connect
Last synced: 7 months ago
JSON representation
Extended OpenID Connect Android integration in a Kotlin app using the AppAuth pattern and Dynamic Client Registration
- Host: GitHub
- URL: https://github.com/curityio/openid-client-android-appauth-dcr
- Owner: curityio
- License: apache-2.0
- Created: 2021-11-01T17:00:00.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2023-03-10T10:02:37.000Z (almost 3 years ago)
- Last Synced: 2025-03-25T14:46:10.094Z (11 months ago)
- Topics: android, appauth, code-example, dynamic-client-registration, mobile, oauth2, openid-connect
- Language: Kotlin
- Homepage: https://curity.io/resources/learn/authenticated-dcr-example/
- Size: 512 KB
- Stars: 1
- Watchers: 4
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# AppAuth with Dynamic Client Registration
An extended Android AppAuth code example using authenticated Dynamic Client Registration.\
This improves the mobile app's security as described in [Mobile Best Practices](https://curity.io/resources/learn/oauth-for-mobile-apps-best-practices/).
## Tutorial Documentation
The [Tutorial Walkthrough](https://curity.io/resources/learn/authenticated-dcr-example) explains the complete configuration and behavior.
## Quick Start
The easiest way to run the code example is via an automated script as explained in the [Mobile Setup Article](https://curity.io/resources/learn/mobile-setup-ngrok):
- Copy a license.json file into the code example root folder
- Edit the `./start-idsvr.sh` script to use either a local Docker URL on an ngrok internet URL
- Run the script to deploy a preconfigured Curity Identity Server via Docker
- Build and run the mobile app from Android Studio
- Sign in with the preconfigured user account `demouser / Password1`
- Run `./stop-idsvr.sh` when you want to free Docker resources
## User Experience
When the user first runs the app there is a prompt to authenticate.\
This gets an initial access token with the `dcr` scope.\
This is then used to create a Dynamic Client, which returns a Client ID and Client Secret.
The user must then authenticate again, and this is automatic via Single Sign On.\
On all subsequent authentication requests the user only needs to sign in once:
Once authenticated, the user is moved to the authenticated view.\
The demo app simply allows other OAuth lifecycle events to be tested.
## Manage Registration Details
To view all registered mobile instances, first connect to the Identity Server's SQL database:
```bash
export DB_CONTAINER_ID=$(docker container ls | grep curity-data | awk '{print $1}')
docker exec -it $DB_CONTAINER_ID bash -c "export PGPASSWORD=Password1 && psql -p 5432 -d idsvr -U postgres"
```
Then query the details of the dynamically registered mobile clients:
```bash
select * from dynamically_registered_clients;
```
## More Information
Please visit [curity.io](https://curity.io/) for more information about the Curity Identity Server.