The auth0 npm package provides a comprehensive solution for implementing authentication and authorization in web applications. It offers a variety of features including user login, signup, password reset, and social login integrations. Auth0 simplifies the process of securing applications by providing a robust and scalable authentication service.
User Login
This feature allows users to log in using their username and password. The code sample demonstrates how to use the password grant type to authenticate a user.
const auth0 = require('auth0');
const auth0Client = new auth0.AuthenticationClient({
domain: 'YOUR_DOMAIN',
clientId: 'YOUR_CLIENT_ID'
});
auth0Client.oauth.passwordGrant({
username: 'user@example.com',
password: 'password'
}, function(err, response) {
if (err) {
console.error(err);
} else {
console.log(response);
}
});User Signup
This feature allows new users to sign up for an account. The code sample demonstrates how to create a new user using the ManagementClient.
const auth0 = require('auth0');
const auth0Client = new auth0.ManagementClient({
domain: 'YOUR_DOMAIN',
clientId: 'YOUR_CLIENT_ID',
clientSecret: 'YOUR_CLIENT_SECRET'
});
const data = {
email: 'newuser@example.com',
password: 'password',
connection: 'Username-Password-Authentication'
};
auth0Client.createUser(data, function(err, user) {
if (err) {
console.error(err);
} else {
console.log(user);
}
});Password Reset
This feature allows users to reset their password. The code sample demonstrates how to request a password reset email.
const auth0 = require('auth0');
const auth0Client = new auth0.AuthenticationClient({
domain: 'YOUR_DOMAIN',
clientId: 'YOUR_CLIENT_ID'
});
auth0Client.requestChangePasswordEmail({
email: 'user@example.com',
connection: 'Username-Password-Authentication'
}, function(err, response) {
if (err) {
console.error(err);
} else {
console.log(response);
}
});Social Login
This feature allows users to log in using their social media accounts. The code sample demonstrates how to initiate a login with Google using the WebAuth client.
const auth0 = require('auth0');
const auth0Client = new auth0.WebAuth({
domain: 'YOUR_DOMAIN',
clientID: 'YOUR_CLIENT_ID'
});
auth0Client.authorize({
connection: 'google-oauth2'
});Passport is a popular authentication middleware for Node.js. It is highly flexible and modular, allowing developers to choose from a wide range of authentication strategies. Unlike Auth0, Passport requires more configuration and setup, but it offers greater control over the authentication process.
Firebase Authentication provides backend services for easy use of authentication in web and mobile apps. It supports email/password authentication, social login providers, and anonymous login. Firebase is a part of the Google Cloud Platform and offers a more integrated solution for apps already using other Firebase services.
Okta is an enterprise-grade identity management service that provides secure authentication and authorization. It offers similar features to Auth0, including user management, social login, and multi-factor authentication. Okta is known for its robust security features and is often used in enterprise environments.
Node.js client library for the Auth0 platform.
npm install auth0
You can find this library documentation in this page.
For more information about auth0 check our documentation page.
This client must be used to access Auth0's Authentication API.
The AuthenticationClient constructor takes an optional client ID, if specified it will be used as default value for all endpoints that accept a client ID.
var AuthenticationClient = require('auth0').AuthenticationClient;
var auth0 = new AuthenticationClient({
domain: '{YOUR_ACCOUNT}.auth0.com',
clientId: '{OPTIONAL_CLIENT_ID}'
});
The Auth0 Management API is meant to be used by back-end servers or trusted parties performing administrative tasks. Generally speaking, anything that can be done through the Auth0 dashboard (and more) can also be done through this API.
Initialize your client class with an API v2 token and a domain.
var ManagementClient = require('auth0').ManagementClient;
var management = new ManagementClient({
token: '{YOUR_API_V2_TOKEN}',
domain: '{YOUR_ACCOUNT}.auth0.com'
});
Note: When using at browser you should use
telemetry: false.
To obtain automatically a Management API token via the ManagementClient, you can specify the parameters clientId, clientSecret (use a Non Interactive Client) and optionally scope.
Behind the scenes the Client Credentials Grant is used to obtain the access_token and is by default cached for the duration of the returned expires_in value.
var ManagementClient = require('auth0').ManagementClient;
var auth0 = new ManagementClient({
domain: '{YOUR_ACCOUNT}.auth0.com',
clientId: '{YOUR_NON_INTERACTIVE_CLIENT_ID}',
clientSecret: '{YOUR_NON_INTERACTIVE_CLIENT_SECRET}',
scope: 'read:users update:users'
});
Make sure your ClientId is allowed to request tokens from Management API in Auth0 Dashboard
To obtain a Management API token from your node backend, you can use Client Credentials Grant using your registered Auth0 Non Interactive Clients
var AuthenticationClient = require('auth0').AuthenticationClient;
var auth0 = new AuthenticationClient({
domain: '{YOUR_ACCOUNT}.auth0.com',
clientId: '{CLIENT_ID}',
clientSecret: '{CLIENT_SECRET}'
});
auth0.clientCredentialsGrant(
{
audience: 'https://{YOUR_ACCOUNT}.auth0.com/api/v2/',
scope: '{MANAGEMENT_API_SCOPES}'
},
function(err, response) {
if (err) {
// Handle error.
}
console.log(response.access_token);
}
);
Also you can request a token when the user authenticates using any of our client side SDKs, e.g. auth0.js.
Be aware that all methods can be used with promises or callbacks. However, when a callback is provided no promise will be returned.
// Using callbacks.
management.getUsers(function(err, users) {
if (err) {
// handle error.
}
console.log(users);
});
// Using promises.
management
.getUsers()
.then(function(users) {
console.log(users);
})
.catch(function(err) {
// Handle error.
});
Auth0 helps you to:
If you have found a bug or if you have a feature request, please report them at this repository issues section. Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.
This project is licensed under the MIT license. See the LICENSE file for more info.
v2.30.0 (2020-10-22)
Added
Changed
Fixed
FAQs
SDK for Auth0 API v2
The npm package auth0 receives a total of 474,874 weekly downloads. As such, auth0 popularity was classified as popular.
We found that auth0 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI confirms no security flaws were exploited in the Ultralytics supply chain attack and highlights improvements for safer package publishing.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.