vue-oidc-client

[basharatusman]

Thank you for setting up this library and the guide for Vue!

I see the library wraps vue-oidc-client, which wraps oidc-client-js. It looks like oidc-client-js is functional but no longer maintained.

Are there any plans to potentially use oidc-client-ts directly for zitadel-vue?

[fforootd]

I guess @peintnermax can reply best to this

[aDogCalledSpot]

vuex-oidc looks promising

[basharatusman]

Thanks @aDogCalledSpot. I was checking the open issues for that library and found pinia-oidc. It also uses oidc-client-ts and appears might be a better for for Vue3 / Pinia.

[aDogCalledSpot]

The README links to vue3-oidc if using Vue3, so maybe that one's the right choice.

[Clex1o1]

maybe its an option to use: https://authjs.dev. There is already a zitadel provider but the vue/nuxt implementation is missing 😁

[aDogCalledSpot]

I just used oidc-client-ts with similar setup steps as Zitadel React and it works alright. There's not much Vue-specific about it.

[el-j]

Anything going on here? is this project active?

Cross-site Scripting (XSS) in serialize-javascript - https://github.com/advisories/GHSA-76p7-773f-r4q5
No fix available
node_modules/serialize-javascript
  oidc-client  >=1.11.0-beta.1
  Depends on vulnerable versions of serialize-javascript
  node_modules/oidc-client
    vue-oidc-client  >=1.0.0-alpha.1
    Depends on vulnerable versions of oidc-client
    node_modules/vue-oidc-client
      @zitadel/vue  *
      Depends on vulnerable versions of vue-oidc-client

[fforootd]

Hm let me raise this internally to see how we want to progress here.

[conblem]

@fforootd what was the outcome here?