Auth0 JavaScript Calling an API

This sample demonstrates how to make secure calls to an API after authenticating a user with Auth0. The calls to the API are made with the user's access_token.

Getting Started

If you haven't already done so, sign up for your free Auth0 account and create a new client in the dashboard. Find the domain and client ID from the settings area and add the URL for your application to the Allowed Callback URLs box. If you are serving the application with the provided serve library, that URL is http://localhost:5000.

If you haven't already done so, create a new API in the APIs section and provide an identifier for it.

Clone the repo or download it from the JavaScript quickstart page in Auth0's documentation.

cd 03-Calling-an-API
npm install

Set the Client ID, Domain, and API URL

If you download the sample from the quickstart page, it will come pre-populated with the client ID and domain for your application. If you clone the repo directly from Github, rename the auth0-variables.js.example file to auth0-variables.js and provide the client ID and domain there.

You should also provide the identifier for the API you create in the Auth0 dashboard as your apiUrl.

Set Up the .env File

In addition to the above-mentioned auth0-variables.js file, a .env file is provided at the root of the application. This file provides your application's credentials to the small Node server located in server.js.

This file has two values, AUTH0_AUDIENCE and AUTH0_DOMAIN. If you download this sample from the quickstart page, the value for AUTH0_DOMAIN will be populated automatically, but you will still need to populate AUTH0_AUDIENCE manually. The value for AUTH0_AUDIENCE is the identifier used for an API that you create in the Auth0 dashboard.

Run the Application

The serve module provided with this sample can be run with the start command.

npm start

The application will be served at http://localhost:5000.

What is Auth0?

Auth0 helps you to:

• Add authentication with multiple authentication sources, either social like Google, Facebook, Microsoft Account, LinkedIn, GitHub, Twitter, Box, Salesforce, amont others, or enterprise identity systems like Windows Azure AD, Google Apps, Active Directory, ADFS or any SAML Identity Provider.
• Add authentication through more traditional username/password databases.
• Add support for linking different user accounts with the same user.
• Support for generating signed Json Web Tokens to call your APIs and flow the user identity securely.
• Analytics of how, when and where users are logging in.
• Pull data from other sources and add it to the user profile, through JavaScript rules.

Create a free Auth0 account

1. Go to Auth0 and click Sign Up.
2. Use Google, GitHub or Microsoft Account to login.

Issue Reporting

If you have found a bug or if you have a feature request, please report them at this repository issues section. Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.

Author

Auth0

License

This project is licensed under the MIT license. See the LICENSE file for more info.