auth0

What is auth0?

The auth0 npm package provides a comprehensive solution for implementing authentication and authorization in web applications. It offers a variety of features including user login, signup, password reset, and social login integrations. Auth0 simplifies the process of securing applications by providing a robust and scalable authentication service.

What are auth0's main functionalities?

User Login

This feature allows users to log in using their username and password. The code sample demonstrates how to use the password grant type to authenticate a user.

const auth0 = require('auth0');
const auth0Client = new auth0.AuthenticationClient({
  domain: 'YOUR_DOMAIN',
  clientId: 'YOUR_CLIENT_ID'
});

auth0Client.oauth.passwordGrant({
  username: '[e-mail]',
  password: 'password'
}, function(err, response) {
  if (err) {
    console.error(err);
  } else {
    console.log(response);
  }
});

User Signup

This feature allows new users to sign up for an account. The code sample demonstrates how to create a new user using the ManagementClient.

const auth0 = require('auth0');
const auth0Client = new auth0.ManagementClient({
  domain: 'YOUR_DOMAIN',
  clientId: 'YOUR_CLIENT_ID',
  clientSecret: 'YOUR_CLIENT_SECRET'
});

const data = {
  email: '[e-mail]',
  password: 'password',
  connection: 'Username-Password-Authentication'
};

auth0Client.createUser(data, function(err, user) {
  if (err) {
    console.error(err);
  } else {
    console.log(user);
  }
});

Password Reset

This feature allows users to reset their password. The code sample demonstrates how to request a password reset email.

const auth0 = require('auth0');
const auth0Client = new auth0.AuthenticationClient({
  domain: 'YOUR_DOMAIN',
  clientId: 'YOUR_CLIENT_ID'
});

auth0Client.requestChangePasswordEmail({
  email: '[e-mail]',
  connection: 'Username-Password-Authentication'
}, function(err, response) {
  if (err) {
    console.error(err);
  } else {
    console.log(response);
  }
});

Social Login

This feature allows users to log in using their social media accounts. The code sample demonstrates how to initiate a login with Google using the WebAuth client.

const auth0 = require('auth0');
const auth0Client = new auth0.WebAuth({
  domain: 'YOUR_DOMAIN',
  clientID: 'YOUR_CLIENT_ID'
});

auth0Client.authorize({
  connection: 'google-oauth2'
});

Other packages similar to auth0

passport

Passport is a popular authentication middleware for Node.js. It is highly flexible and modular, allowing developers to choose from a wide range of authentication strategies. Unlike Auth0, Passport requires more configuration and setup, but it offers greater control over the authentication process.

firebase

Firebase Authentication provides backend services for easy use of authentication in web and mobile apps. It supports email/password authentication, social login providers, and anonymous login. Firebase is a part of the Google Cloud Platform and offers a more integrated solution for apps already using other Firebase services.

okta

Okta is an enterprise-grade identity management service that provides secure authentication and authorization. It offers similar features to Auth0, including user management, social login, and multi-factor authentication. Okta is known for its robust security features and is often used in enterprise environments.

README

Node.js client library for the Auth0 platform.

Instalation

npm install auth0

Usage

var Auth0 = require('auth0');

var client = new Auth0({
  clientID:     'your-client-id',
  clientSecret: 'your-client-secret',
  domain:       ''
});

client.getConnections(callback)

client.getConnections(function (err, connections){
  //.....
});

client.createConnection(callback)

var myNewConnection =  {
    "name": "a-new-connection",
    "strategy": "google-oauth2",
    "options": {
      "client_id": "aaa",
      "client_secret": "aadsadsadsa",
      "sites": true,
      "spreadsheets": true,
      "url_shortener": true,
      "webmaster_tools": true
    }
  };

client.createConnection(myNewConnection, function (err) {
  //.....
});

client.getUsers({[connection: connection], [per_page: 10]}, callback)

This method returns a list of users.

If connection name is passed on the options, it will search the users on the directory of the connection. Suppose it is a Windows Azure Active Directory connection it will fetch all the users from the directory. If the connection doesn't have a directory or it is a Social connection like Google Auth 2 it will return all the users that have logged in to your application at least once.

The amount of items per page is optional (defaults to 100) and it is not supported for all directories, eg: connections using Google Apps ignores this argument and uses 100.

client.getUsers({connection: 'a-waad-connection'}, function (err, result) {
  //result is an array with the user objects
});

The callback has the common signature for node.js method [err, result] where result is an array of users with an special hidden property called nextPageLink. These links are safe to be shared since they will work for a short period of time and have an special signature that make them safe.

Although you can do a simple GET to that link to fetch the next page, you can use the library as well:

client.getUsers({connection: 'a-waad-connection'}, function (err, firstPageOfResults) {
  client.getUsers({page: firstPageOfResults.nextPageLink}, function (err, secondPageOfResults) {
  });
});

client.getSocialUsers({[per_page: 10]}, callback)

The same than getUsers but this method returns users for all social connections, ie: not enterprise connections.

client.getConnection(name, callback)

client.getConnection('my-connection', function (err, connection){
  //.....
});