/ 
Browser-OIDC-0.002
/ Browser::OIDC

NAME

Browser::OIDC - Get an OIDC token for a CLI application

SYNOPSIS

 my $oidc = Browser::OIDC->new($base_url);
 my $token = $oidc->get_token(
	 client_id => 'me',
	 scope     => [ 'email' ],
 );

DESCRIPTION

This module will open a browser for you to log into some OIDC provider, and will temporarily run a webserver on localhost to receive the redirect with the results from your browser.

METHODS

new

my $oidc = Browser::OIDC->new($base_url);

This creates a new Browser::OIDC object. This will fetch the configuration for the given $base_url.

get_token

$oidc->get_token(%options);

This fetches OIDC tokens from the endpoint. Note though that this module only fetches the tokens, it will not perform any decoding or verification on them.

It takes the following options:

client_id

The client identifier. Mandatory.

client_secret

The client secret, if any.

scope

This list will be the scopes of the request. 'openid' is automatically added to this list so does not need to be given.

message

The message that will be shown to the user in the browser on completion.

message_type

The content type of the message e.g. text/plain or text/html.

display

ASCII string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User. The defined values are: page, popup, touch, and wap.

prompt

Case-sensitive list of ASCII string values that specifies whether the Authorization Server prompts the End-User for reauthentication and consent. The defined values are: none, login, consent, and select_account.

max_age

Maximum Authentication Age. Specifies the allowable elapsed time in seconds since the last time the End-User was actively authenticated by the OP. Note that max_age=0 is equivalent to prompt=login.

login_hint

Hint to the Authorization Server about the login identifier the End-User might use to log in (if necessary).

nonce

issuer

$oidc->issuer;

This returns the issuer. This should match the iss values in the tokens.

claims_supported

$oidc->claims_supported;

This returns the list of supported claims.

scopes_supported

$oidc->scopes_supported;

This returns the list of supported scopes.

TODO

Open ID Connect and OAuth2 are large standards, so far only a tiny fraction is implemented here. Feel free to request specific features if you need them. Patches are welcome.

AUTHOR

Leon Timmermans <fawaka@gmail.com>

COPYRIGHT AND LICENSE

This software is copyright (c) 2026 by Leon Timmermans.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.