@aserto/aserto-spa-js

Aserto single-page application javascript SDK

Loosely modeled after the Auth0 SPA SDK.

Installation

Using npm:

npm install @aserto/aserto-spa-js

Using yarn:

yarn add @aserto/aserto-spa-js

Getting Started

Creating the client

Create an AsertoClient instance before rendering or initializing your application. You should only have one instance of the client.

You need a valid access token before you can instantiate the client. For the next few examples, the accessToken variable is assumed to contain a valid access token.

To obtain one via Auth0 (for example), use code like this:

// get a valid access token, e.g. from Auth0 getTokenSilently()
import createAuth0Client from '@auth0/auth0-spa-js';
const auth0 = await createAuth0Cient(
  domain: '<AUTH0_DOMAIN>',
  client_id: '<AUTH0_CLIENT_ID>',
  redirect_uri: '<MY_CALLBACK_URL>'
);
const accessToken = await auth0.getTokenSilently();

Create an AsertoClient in the following way:

import createAsertoClient from '@aserto/aserto-spa-js';

const aserto = await createAsertoClient({
  token: accessToken,  // valid access token
  endpoint: 'authzmap' // authz map endpoint, defaults to /authzmap
});

// or you can just instantiate the client on its own
import { AsertoClient } from '@aserto/aserto-spa-js';

const aserto = new AsertoClient({
  token: accessToken,
  endpoint: 'authzmap' // authz map endpoint, defaults to /authzmap
});

Get the authorization map for a service that exposes it

First, make sure that the service supports an authorization map endpoint - for example using the NodeJS Express middleware express-jwt-aserto.

Once a service exposes the endpoint, you can call the getAuthorizationMap() function on the AsertoClient instance to retrieve the map.

The following example adds an event handler to a button that retrieves the authorization map and logs it to the console:

<button id="get-authz-map">Get AuthZ Map</button>

document.getElementById('get-authz-map').addEventListener('click', async () => {
  const [authzMap, error] = await aserto.getAuthorizationMap();
  if (error) {
    console.error(error);
  } else {
    console.log(authzMap);
  }
});