Identidade centralizada para todas as suas aplicações

import { UserManager, WebStorageStateStore }
  from 'oidc-client-ts';

const auth = new UserManager({
  authority:    'https://auth.seudominio.com',
  client_id:    'SEU_CLIENT_ID',
  redirect_uri: `${origin}/callback`,
  scope: 'openid email profile offline_access',
  response_type: 'code',
  automaticSilentRenew: true,
  userStore: new WebStorageStateStore({
    store: window.sessionStorage,
  }),
});

// Iniciar login
await auth.signinRedirect();

// No callback
await auth.signinRedirectCallback();

import { createRemoteJWKSet, jwtVerify }
  from 'jose';

const jwks = createRemoteJWKSet(
  new URL('https://auth.seudominio.com/jwks')
);

async function verifyToken(token: string) {
  const { payload } = await jwtVerify(token, jwks, {
    issuer:   'https://auth.seudominio.com',
    audience: 'https://auth.seudominio.com',
  });

  // Claims disponíveis no payload:
  // payload.sub           → userId
  // payload.account_id    → conta ativa
  // payload.roles         → ['admin', ...]
  // payload.is_admin      → true | false
  // payload.resource_scopes → ['fin:read', ...]
  return payload;
}