Auth0

tenants = A logical isolation unit. Once you create your account you will be asked to create a Tenant.

domain = TENANT-NAME.auth0.com

client = we call the app using Auth0 a client. it will have client id + client secret (password); it has types: native / regular web / single page

connection = bridge between users and auth0. sources of users in following types: database / social logins / enterprise directories / passwordless systems

Auth0 Overview

Auth0 provides authentication and authorization as a service.

overview

can use Auth0 to do 1) secure API; 2) Single Sign On; 3) One-time codes delivered by email or SMS; 4) block suspicious IP; 5) multifactor authentication; 6) user manager console

Open ID Connect sit on top of OAuth 2. Use for authentication.

account = sign up for Auth0 account for free

Dashboard Overview

dashboard = activity statistics

clients = manage clients, each of which wrapper an app

apis = manage apis you want to secure with Auth0

SSO Integrations = Single Sign On (SSO) Integrations enable the use of external services for single sign-on

connections = manage identity providers that you use to login to your apps. 4 types: db / social / enterprise / one-time codes

users = manage user's identities

rules = configure JS snippets that are executed in Auth0 as part of transaction every time a user authenticates to your app.

hosted pages = create a login page where can redirect to authenticate user

emails = standard welcome, password reset, account verification email-based workflows.

Authorization Extension = a extension provide user / group / role / permission management

API Audience: The audience is a parameter set during authorization, and it contains the unique identifier of the target API. This is how you tell Auth0 for which API to issue an access token, which is the intended audience of this token.