auth0-password-grant
Advanced tools
CLI Auth0 access tokens through the Resource Owner Password Grant
This is a port of the original auth0-password-grant to a npm package. CLI Auth0 access tokens.
auth0-password-grant is a command-line tool to quickly provision new Auth0 access tokens using the Resource Owner Password Grant.
Igrom@foo: ~$ auth0-password-grant -u igrom@example.com -p 123456
eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6InlNR2cwTUllT09NZUdnR3dJd0lpTUlNTWdNd3lwR2dJZ0lpaTRnTUlNRWdJTUNNR2dFd01NIn0gCg==
Igrom@foo: ~$ !! | base64 -d | jq
{
"typ": "JWT",
"alg": "RS256",
"kid: "yMGg0MIeOOMeGgGwIwIiMIMMgMwypGgIgIii4gMIMEgIMCMGgEwMM"
}
Provisioning Auth0 access tokens for making manual API calls is a commonly done task. As most tokens soon expire, it is often necessary to provision multiple access tokens in a single session. This tool aims to reduce the tediousness of doing this.
It is possible to pass all required request parameters: username, password, auth0 domain URL and more through command-line options, but it is more convenient to save them in a config file that auth0-password-grant reads on execution.
Features:
apt install jq
yarn global install auth0-password-grant
For common workflows it is recommended to create the following shorthand:
alias tok='auth0-password-grant -BX'
to quickly construct a valid Authorization header and put it in the clipboard.
Warren Parad
Copyright © 2018 Warren Parad. Licensed under the 3-clause BSD license.
FAQs
CLI Auth0 access tokens through the Resource Owner Password Grant
We found that auth0-password-grant demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.