Leonardo Devai
58e3fa62ea
21 bite-sized beginner tutorials (Web Basics, APIs & Data), the 8-backend blog engine series, 4 blog frontends, 2 React starters, 3 NixOS desktops and 4 Rust API/pipeline boilerplates. Every folder is a complete, self-contained project with its own README. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VGNxPf9PrSG2kzrxSvn45Y
31 lines
1.3 KiB
Markdown
31 lines
1.3 KiB
Markdown
# Auth via Auth0
|
|
|
|
Replaces the built-in email/password auth with [Auth0](https://auth0.com).
|
|
Auth0 issues RS256 access tokens; the API verifies them against your tenant's
|
|
JWKS, checking issuer and audience. One file, no Auth0 SDK.
|
|
|
|
## Install
|
|
|
|
1. In the Auth0 dashboard, create an **API** — its identifier becomes your
|
|
audience.
|
|
2. Add the RS256 backend: `uv add "pyjwt[crypto]"`
|
|
3. Copy `auth0_auth.py` to `app/auth0_auth.py`
|
|
4. In `app/posts.py`, change one import:
|
|
`from .auth0_auth import current_user_id`
|
|
5. Set `AUTH0_DOMAIN` (e.g. `your-tenant.us.auth0.com`) and `AUTH0_AUDIENCE`
|
|
(the API identifier from step 1).
|
|
|
|
## Delete / adjust
|
|
|
|
- `app/auth.py` and its router registration in `app/main.py` — Auth0 replaces
|
|
`/auth/register` and `/auth/login`.
|
|
- The `users` table in `schema.sql` — Auth0 stores your users.
|
|
- `posts.author_id` now holds an Auth0 user id (a string like `auth0|64ef…`):
|
|
change the column to `author_id text NOT NULL` and drop the `REFERENCES`
|
|
clause (edit `schema.sql` before first start, or `ALTER TABLE` a live db).
|
|
Type hints in `app/posts.py` change from `int` to `str` to match.
|
|
- `AUTH_SECRET` is unused.
|
|
|
|
Clients obtain tokens through any Auth0 flow (Authorization Code + PKCE for
|
|
SPAs; the API's **Test** tab issues one for quick manual checks) and send them
|
|
as `Authorization: Bearer <token>`.
|