This is the auth0 authentication strategy for Passport.js.
npm install passport-auth0
Take your credentials from the settings section in the dashboard and initialize the strategy as follows:
var Auth0Strategy = require('passport-auth0'),
passport = require('passport');
var strategy = new Auth0Strategy({
domain: 'your-domain.auth0.com',
clientID: 'your-client-id',
clientSecret: 'your-client-secret',
callbackURL: '/callback'
},
function(accessToken, refreshToken, extraParams, profile, done) {
// accessToken is the token to call Auth0 API (not needed in the most cases)
// extraParams.id_token has the JSON Web Token
// profile has all the information from the user
return done(null, profile);
}
);
passport.use(strategy);app.get('/callback',
passport.authenticate('auth0', { failureRedirect: '/login' }),
function(req, res) {
if (!req.user) {
throw new Error('user null');
}
res.redirect("/");
}
);
app.get('/login',
passport.authenticate('auth0', {}), function (req, res) {
res.redirect("/");
});This way when you go to /login you will get redirected to auth0, to a page where you can select the identity provider.
If you want to force an identity provider you can use:
app.get('/login/google',
passport.authenticate('auth0', {connection: 'google-oauth2'}), function (req, res) {
res.redirect("/");
});If you want to get a list of connections or users from auth0, use the auth0 module.
A complete example of using this library here.
For more information about auth0 contact our documentation page.
If you have found a bug or if you have a feature request, please report them at this repository issues section. Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.
This project is licensed under the MIT license. See the LICENSE file for more info.