auth0-samples / auth0-express-webapp-sample Goto Github PK

View Code? Open in Web Editor NEW

65.0 26.0 99.0 2.76 MB

Auth0 Integration Samples for an Express web application

License: MIT License

JavaScript 32.55% EJS 67.45%

auth0 authentication express node quickstart dx-sdk-quickstart

auth0-express-webapp-sample's People

Contributors

Stargazers

Watchers

Forkers

madsharm antonigiovanniello dfalzate davidpatrick wadenick pdillon iammuhit mattdanielbrown l3r dscape svenefftinge gitpod-io jerdog michaelfridman mohamedmanitoo vverheij lilyayala-zz saltukalakus rnxrenuxs tshankarappa francesca-bit stuffyudaya scchess marceltanuri dwaynedraper rajatchauhannn c-eo lafayetteduarte drd4n chhellberg sarangan kuby77 echonok elranu viniciusingracio redstone-2 nicomilos bpgallagher wwwebjoel woz crismannoble tamollyo jonrovner nthon rokit-pk isabella232 rowlandg kurthermansen jennifertieu udobretz zachclarity andr3ina irow-git rmourey26 yuzukicat radioli nadeera3784 algorox demetreades barbarianwizard marshadshaheen aetotvl6789 meirsedlis antonio-david-tejada-villalon simeon619 satoshifarming tyfrth tanver-hasan itsgamingtube cristianamg cdev003 nickgamb limbodzz leon-sebrek julioramirez snehilsagarjain m4ckdaddy siddh-kivtechs alfed7 rafa852 jeryllow devabdeltoom sachtony mustafadeel bgarlow lucassrg-okta supreti17 backend-2030 chervonnyyanton pojiyasin88 jkffff09 tahmidchowdhury joooaannfeerrrraann bpanatpur

auth0-express-webapp-sample's Issues

Logging in gives an error: access_denied (Error: getaddrinfo ENOTFOUND undefined)

When I start this sample app and login, I get this error: "access_denied (Error: getaddrinfo ENOTFOUND undefined)". This is visible in the browser as well as in the logs from the Quickstart page on my dashboard (pasted below).

I've specified the "Allowed Callback URLs" and the "Allowed Logout URLs" as described in the instructions. I also tried running a https reverse proxy.

What am I missing here?

{
  "date": "2022-09-23T00:03:10.344Z",
  "type": "f",
  "description": "Error: getaddrinfo ENOTFOUND undefined",
  "connection_id": "",
  "client_id": "xx",
  "client_name": "xx",
  "ip": "x.x.x.x",
  "user_agent": "Chrome 105.0.0 / Mac OS X 10.15.7",
  "details": {
    "body": {},
    "qs": {
      "client_id": "xx",
      "scope": "openid profile email",
      "response_type": "id_token",
      "redirect_uri": "http://localhost:3000/callback",
      "response_mode": "form_post",
      "nonce": "u3aMUzGNXhcP5XAfo1XvNNmAsMAUNrI1PQqqKkbTizI",
      "state": "eyJyZXR1cm5UbyI6Imh0dHA6Ly9sb2NhbGhvc3Q6MzAwMCJ9"
    },
    "error": {
      "message": "Error: getaddrinfo ENOTFOUND undefined",
      "oauthError": "access_denied",
      "type": "oauth-authorization"
    },
    "session_id": "LNghNMbuuphTy9I9HLqq0N6bX8LSjvK3",
    "stats": {
      "loginsCount": 13
    }
  },
  "hostname": "xxx.us.auth0.com",
  "user_id": "auth0|xxx",
  "user_name": "[email protected]",
  "audience": "https://xxx.us.auth0.com/userinfo",
  "scope": [
    "openid",
    "profile",
    "email"
  ],
  "log_id": "90020220923000314746157585488925899669990466254387806258",
  "_id": "90020220923000314746157585488925899669990466254387806258",
  "isMobile": false,
  "id": "90020220923000314746157585488925899669990466254387806258"
}

Passwordless use

Hi, the passwordless feature is described at https://auth0.com/docs/authenticate/passwordless/passwordless-with-new-universal-login could you allow this demo to support that?

01 sample is using the implicit flow instead of code flow.

I presume for this sample, it is better to demonstrate the code flow. 01-sample uses the implicit flow which isn't ideal for regular apps.

https://github.com/auth0/express-openid-connect/blob/master/API.md#authorization-params-key

Add support for organization member invitations

Checklist

I have looked into the Readme (Starter seed/Login) and have not found a suitable solution or answer.
I have searched the issues and have not found a suitable solution or answer.
I have searched the Auth0 Community forums and have not found a suitable solution or answer.
I agree to the terms within the Auth0 Code of Conduct.

Describe the problem you'd like to have solved

When users are invited to join an organization they receive an invitation link by email. This link redirects them to the configured default login route with invitation-specific parameters appended (see below). The problem is that these parameters do not get sent along on the redirect url.

See this issue for how it's resolved using the express-openid-connect module, but this quickstart should have support for this ootb.
auth0/express-openid-connect#365

Describe the ideal solution

The following parameters should be optionally included in the url when the user is redirected to authenticate:
invitation
organization
organization_name

Alternatives and current workarounds

No response

Additional context

No response

option sameSite is invalid - Quickstart tutorial not working

I run the Quickstart guide or similar tutorial... https://www.youtube.com/watch?v=QQwo4E_B0y8
and get the "option sameSite is invalid" error in my browser that appears to be somewhat common. Auth0 docs has some recommendations including installing Caddy, but there has to be an easier solution. I have a practically brand new computer with all recent versions of software and can't run the simple Auth0 demo out of the box.

Sample app breaks when running on IPv6

Hi,

Running the sample app in /01-Login on the following set-up results in the error below when I click login in the webapp:
node version: v18.5.0
OS: macOS Monterey V12.4

const err = new AggregateError(errors);
AggregateError: Issuer.discover() failed.
    RequestError: Timeout awaiting 'request' for 5000ms
    RequestError: Timeout awaiting 'request' for 5000ms
    at Function.discover (/Users/xxx/git/auth0-express-webapp-sample/01-Login/node_modules/openid-client/lib/issuer.js:265:17)
    at processTicksAndRejections (node:internal/process/task_queues:96:5)
    at async pReflect (/Users/xxx/git/auth0-express-webapp-sample/01-Login/node_modules/p-reflect/index.js:5:17)
    at async Promise.all (index 0)
    at async /Users/xxx/git/auth0-express-webapp-sample/01-Login/node_modules/p-memoize/index.js:33:22
    at async get (/Users/xxx/git/auth0-express-webapp-sample/01-Login/node_modules/express-openid-connect/lib/client.js:43:18)
    at async pReflect (/Users/xxx/git/auth0-express-webapp-sample/01-Login/node_modules/p-reflect/index.js:5:17)
    at async Promise.all (index 0)
    at async get (/Users/xxx/git/auth0-express-webapp-sample/01-Login/node_modules/p-memoize/index.js:33:22)
    at async ResponseContext.login (/Users/xxx/git/auth0-express-webapp-sample/01-Login/node_modules/express-openid-connect/lib/context.js:182:20)

Disabling IPv6 on my mac as per this article resolves this. Is there a fix for this else, at least a warning for new users?

Setup new laptop Window 10 Getting those issue with auth 0

This application not working with localhost. Any solution here please