Skip to main content

User Management with Auth0: A Deeper Look

It occurred to me that I never actually got into the nitty-gritty of my last post with some JavaScript code examples, and how easy it can be without being restricted to using templates that you need to force to make work.

Take these first scripts:

First, after including the API required, the first part is simply declaring your Domain and Client ID which you can find from the application's dashboard. The next two functions, _connectSocial and _login.  Are very similar.  The first takes a string of the social you would like to link (providing you have enabled it in your application within Auth0), and produces a popup modal for the user to enter their credentials.

The second function allows you to simply pass a username and password which you can use values from a form you create.  You'll notice for both functions, it has a parameter it is passing called redirectUri.  Here I am specifying for it to come back to the same page after the authentication has processed.  Be sure to add whichever URI to follow on to as a valid callback URL within the Auth0 dashboard.

Finally I have created a _signup function.  Use the email and password from values on your form you create, and you can use the usermeta variable as an object, each key must have a string value.

Before I go any further, perhaps there is a better way around it - but I found that by using a social login, using the popup modal dialog, that after the authentication is processed, it leaves that window open, along with the page he has redirected to (in my case, the same page I was on).

To compensate for this, I have added the following function:

What's happening here is, that when the authentication is finished, I am calling this function to validate the user in my website's backend (posting to /login).  If it is successful and I find all the fields have been validated, I am storing the data to the users' session.  When the request is complete, the script works out if the window it is currently executing the script in is a popup, it reloads its parent, and then closes itself.

The idea is that having a validated user in the session, reloading the page will first check if the user is logged in.

This begs one last question, how does the script know that it needs to verify the response from Auth0, if it is loading the same page from where it was requested from?  The last point in my script I have the following:

The response comes back in the form of query string concatenated after a #.  So after the page is loaded, and this value is picked up, it then calls the following function:


And hey presto! You've quickly ticked off logging in via social and custom form, as well as creating a custom signup function. As always, I'm open to gentle criticism and suggestions.

Comments

Popular posts from this blog

Running NodeJS Serverless Locally

 So it's been a long time, but I thought this was a neat little trick so I thought I'd share it with the world - as little followers as I have.  In my spare time I've been writing up a new hobby project in Serverless , and while I do maintain a staging and production environment in AWS, it means I need to do a deployment every time I want to test all of the API's I've drafted for it. Not wanting to disturb the yaml configuration for running it locally, I've come up with a simple outline of a server which continues to use the same configuration.  Take the express driven server I first define here: And then put a index.js  in your routes folder to contain this code: Voila! This will take the request from your localhost and interpret the path against your serverless.yml and run the configured function.  Hope this helps someone!

question2answer Wordpress Integration

 Today I want to journal my implementation of a WordPress site with the package of "question2answer".  It comes as self-promoted as being able to integrate with WordPress "out of the box".  I'm going to vent a small amount of frustration here, because the only integration going on is the simplicity of configuration with using the same database, along with the user authentication of WordPress.  Otherwise they run as two separate sites/themes. This will not do. So let's get to some context.  I have a new hobby project in mind which requires a open source stack-overflow clone.  Enter question2answer .  Now I don't want to come across as completely ungrateful, this package - while old, ticks all the boxes and looks like it was well maintained, but I need every  page to look the same to have a seamless integration.  So, let's go through this step by step. Forum Index Update This step probably  doesn't need to be done, but I just wanted to mak...

Getting all deltas from Auth0

Before I get in to the solution of this article, let me tell you how it started and fill you in on the problem that arose.  I wrote a procedure to get daily deltas of users - those of which who had created/updated their account on the given day (and including the day before for good measure on the GMT timestamp).  The simple search criteria was just the following: updated_at:[yyyy-mm-dd TO yyyy-mm-dd] Simple, right?  the []'s being the dates are inclusive, while using {} would mean exclusively.  Auth0 lets you mix these on either side depending on your use.  While this is all well and good, Auth0 will limit the number of results (even with paging) to 1000 only. So, your first option is that you could have your procedure create a user export job, and then parsing through the results and eliminating those which do not meet your updated_at search criteria.  I can tell you first hand that eventually the amount of users will just get to be too much and cumb...