Authorization Series - Pt 3: Dynamic Authorization with GraphQL and Rules

[holly]

Hi again and sorry for the delay!

You can call your own API from within the rule by first registering the API with Auth0 and then using M2M authorization between your API and the Auth0 rule.

Here are the steps to do that:

How do I call my API from a rule?

Question: How do I call my API from a rule? Answer: To do this, you will need to configure your rule to make an API call. You can add Machine 2 Machine (M2M) authorization between your the rule and the your target API, just like you would between any two non-interactive clients, protecting the transaction with Auth0. First, register your API. This can be done via the Dashboard or the Management API. In the Dashboard, navigate to APIs → + Create API. Here you can set up your API, register you…

And then once you’re able to connect to your API and grab the role you want to add for the user that’s signing in, you can add it to the access token like this:

Sample Use Cases: Rules with Authorization

This sample shows a similar setup, but instead of grabbing querying the API, it’s pulling straight from the database. Just an example of how both steps can work together!

https://auth0.com/rules/add-roles-from-sqlserver

Let me know if that helps!