'use strict';

// Load modules

const Hapi = require('hapi');
const Hoek = require('hoek');
const Boom = require('boom');

const server = new Hapi.Server();
server.connection({ port: 8000 });

server.register([require('hapi-auth-cookie'), require('../')], (err) => {

    Hoek.assert(!err, err);
    server.auth.strategy('session', 'cookie', {
        password: 'secret_cookie_encryption_password', //Use something more secure in production
        redirectTo: '/auth/okta', //If there is no session, redirect here
        isSecure: false //Should be set to true (which is the default) in production
    });

    server.auth.strategy('okta', 'bell', {
        provider: 'okta',
        password: 'cookie_encryption_password_secure',
        isSecure: false,
        location: 'http://127.0.0.1:8000',
        clientId: 'IIA1yMR7IK4XGhfyfCno',
        clientSecret: 'PEh_HemJovaR-Zjs-unX8-cC9IhQgzF5M1RUrUgW'
    });

    server.route({
        method: 'GET',
        path: '/auth/okta',
        config: {
            auth: 'okta',
            handler: function (request, reply) {

                if (!request.auth.isAuthenticated) {
                    return reply(Boom.unauthorized('Authentication failed: ' + request.auth.error.message));
                }

                //Just store the third party credentials in the session as an example. You could do something
                //more useful here - like loading or setting up an account (social signup).
                request.auth.session.set(request.auth.credentials);

                return reply.redirect('/');
            }
        }
    });

    server.route({
        method: 'GET',
        path: '/',
        config: {
            auth: 'session',
            handler: function (request, reply) {

                //Return a message using the information from the session
                return reply('Hello, ' + request.auth.credentials.profile.email + '!');
            }
        }
    });

    server.start((err) => {

        Hoek.assert(!err, err);
        console.log('Server started at:', server.info.uri);
    });
});

@@ -663,32 +663,93 @@
 ovider: 'okta',%0A
+        config: %7Buri: 'https://your-organization.okta.com'%7D,%0A
         password

Update Okta example to be correct