README

Use Auth0 with Craft.

Requirements

This plugin requires Craft CMS 3.1.x or later.

Installation

To install the plugin, follow these instructions.

Open your terminal and go to your Craft project:
```
 cd /path/to/project
```
Then tell Composer to load the plugin:
```
 composer require angell-co/auth0
```
In the Control Panel, go to Settings → Plugins and click the “Install” button for Auth0.

Overview

Auth0 is a service that allows you to rapidly integrate Universal Login, Single Sign On (SSO), Multifactor Authentication and more into your website or application.

You can use this plugin to frictionlessly integrate your Craft site with Auth0.

Configuration

Before you get going with this plugin you’ll want to set up an application on Auth0, choose the "Regular Web Application" option at this stage and don’t worry about filling in the rest of the settings as we’ll get to that later.

Configuration for this plugin is managed through the config file. Once you have installed the plugin copy the file from /path/to/project/vendor/angellco/auth0/src/config.php to /path/to/project/craft/config/auth0.php and fill in the relevant values.

The file has comments to help you out, but you can see a detailed list of the variables and their values below.

TODO: document config.

Once you have done that, return to your application in the Auth0 dashboard and fill in the following sections:

TODO: document Auth0 appliction settings.

URL for callback is https://myproject.test/actions/auth0/auth/callback.

"Allowed Logout URLs" setting should match what is set in logoutReturnUrl config variable.

Usage

TODO

Login action: {{ actionUrl('auth0/auth/login') }} - logs in to both Auth0 and Craft and silently creates and activates a user if there isn’t one
Logout action: {{ actionUrl('auth0/auth/logout') }} - just logs out Auth0, use regular Craft logout action or URL to be logged out of both

Roadmap

Some things to do, and ideas for potential features:

Release it
Add option to not automatically create new users
Add the default login route
Document the config file
Document the Auth0 application settings
Document the events
Document how to use with alternative session stores
Add twig variable so we can get at the user data in templates
Handle being logged out of Auth0 but still logged in to Craft, what happens then?
Allow the EVENT_BEFORE_USER_LOGIN event to cancel the login attempt
Use session duration from Auth0 and add option to override this to use Craft’s

Brought to you by Angell & Co

angellco / auth0

Maintainers

Details