Automatic Signin with Okta

[tomkcey]

Node.js v20.11.1

next: 14.1.3
next-auth: 5.0.0-beta.19

Hi,

I'm having some difficulty understanding how to implement cross-application-sign-in (that's probably not the right term) of Okta SSO.

What I mean is; I use Okta for other applications too and if I signed into Okta previously and then land on the target application where I want to apply this flow I would like to sign in the user directly instead of asking him to Sign In using the Okta widget.

Is it feasible? Here's the code that currently handles authentication in my application and it works out of the box. However, it redirects me to the sign in page if I come from another application governed by the Okta authentication.

auth.ts

import NextAuth from 'next-auth';
import Okta from 'next-auth/providers/okta';

export const { auth, handlers } = (() => {
	process.env.AUTH_URL = process.env.CANONICAL_URL;

	return NextAuth({
		secret: process.env.OKTA_AUTH_SECRET,
		session: { strategy: 'jwt' },
		trustHost: true,
		providers: [
			Okta({
				clientId: process.env.OKTA_CLIENT_ID,
				clientSecret: process.env.OKTA_CLIENT_SECRET,
				issuer: process.env.OKTA_CLIENT_ISSUER_URL
			}),
		]
	});
})();

middleware.ts

import { auth } from '@/auth';

const SIGNIN_PATH = '/api/auth/signin' as const;

export default auth(async (req) => {
	if (!req.auth) {
		return NextResponse.redirect(new URL(SIGNIN_PATH, req.nextUrl.origin));
	}
});