@plantimer/nativescript-auth0

``bash
npm install @plantimer/nativescript-auth0
`

How does it work ?

The only workflow currently supported is the Authorization Code Grant with PKCE with a refresh token.

This will not work if you haven't enabled the refresh token setting !

Following the diagram given in the Auth0 docs, the flow is as follows:

- The user is redirected to the Auth0 login page with a PKCE challenge
- The user logs in and is redirected back to the app with an access code
- The stores the refresh token fetched using the access code, the PKCE challenge and the PKCE verifier
- The app fetches the access token using the refresh token

Usage

This plugin uses the InAppBrowser plugin to open the Auth0 login page and the NativeScript Secure Storage plugin to store tokens.

$3

`js
import { Auth0 } from '@plantimer/nativescript-auth0';

const config = {
auth0Config: {
domain: 'mydomain.auth0.com', // Domain name given by Auth0 or your own domain if you have a paid plan
clientId: 'ClIenTiDgIvEnByAuTh0', // Client ID given by Auth0
audience: 'https://your.audience.com', // Often a URL
redirectUri: 'schema:///', // The app's schema (set in AndroidManifest.xml and Info.plist)
},
browserConfig: {
// InAppBrowser configuration
}
}

Auth0.setUp(config).signUp("email@provider.com"); // Optional hint to pre-fill the email field
Auth0.setUp(config).signIn();
Auth0.setUp(config).getAccessToken();
`

$3

`typescript
// *.component.ts
import { NativescriptAuth0 } from '@plantimer/nativescript-auth0';

@Component({
selector: 'ns-app',
template: 'Login',
})
export class AppComponent {
login() {
const config = {
auth0Config: {
domain: 'mydomain.auth0.com', // Domain name given by Auth0 or your own domain if you have a paid plan
clientId: 'ClIenTiDgIvEnByAuTh0', // Client ID given by Auth0
audience: 'https://your.audience.com', // Often a URL
redirectUri: 'schema:///', // The app's schema (set in AndroidManifest.xml and Info.plist)
},
browserConfig: {
// InAppBrowser configuration
}
}

Auth0.setUp(config).signUp("email@provider.com"); // Optional hint to pre-fill the email field
Auth0.setUp(config).signIn();
Auth0.setUp(config).getAccessToken();
}
}
``

$3

Deep linking is the ability for the app to open when a link is clicked. This is required for the redirectUri to work.

Please follow the InAppBrowser documentation to enable deep linking (i.e. set the schema).

Ideas and issues

If you have any ideas, issues or security concerns, please open an issue !

License

This repository is available under the MIT License.