Auth0
Description
At the time of making this app,
I do work at Okta where my focus has recently shifted to Auth0.
Auth0 is the (debatably) industry leading Customer Identity & Access Management (CIAM) platform. Yes, it
is a "security" platform. However, it enables elite product execution by increasing customer retention & growth through a secure & slick
customer experience. It does this as it touches a variety of business units: software engineering, product, marketing,
security & sometimes more. If one implements Auth0, one will quickly realize it is made for developers, which is where my attraction
to it fostered. My current role graciously enables me to engineer alongside this great product. How I showcase my skills is by
expanding upon our Django SDK.
This SDK simple starts with just a home page and login button that simply redirects to Auth0's hosted sign-in/sign-up page
"Universal Login" and returns an ID & Access token (OIDC, OAuth). I have expanded on this by making this SDK more presentable
(the home page of the SDK is only 18 lines of html...) and adding much more Auth0 functionality than simple username/password login: multi-tenancy via Organizations, multiple client apps, customizing claims on returned tokens
(RBAC, sync'd user profile info, business context), inbound federation, sessions, progressive profiling, contextualizing MFA, etc.
The functionality exposed is all publicly available on Auth0's documentation.
Topics
Web Frameworks, Customer Identity (OIDC, OAuth, SAML, SCIM),
JWTs (JSON Web Tokens), M2M (Machine-to-Machine/API Security), FGA (Fine Grained Authorization), RBAC, Session Management, Inbound Federation, MFA, multi-tenancy
Stack
Django Backend (w/ SQLite), Bootstrap Frontend, Auth0, Heroku
Auth0 Functionality
Auth0 Actions, Organizations (multi-tenancy),
Self-Service SSO, Enterprise Connections, Inbound SCIM, MFA, Auth0 Forms, authentication types (Social Login/Inbound SSO/Passwordless/username-passwords), Attack Protection, Account Linking
Github Repos
-
Matt Halden Auth0 Django SDK
-
Visit it live here