Help to set up authentication and authorization for SPA

[dan.woda]

Hi @Vegvisir,

Welcome to the Community!

If I understand your case correctly, this should be possible using Roles and RBAC and rules. You can create 2 roles, user and ‘adminfor example. In a rule, you can add theuser’ role to all users on first login, and add admin to all users with @example.com email domain.

Here is an example rule for adding the role:

How do I add a default role to a new user on first login?

Question: How do I assign a default role to a new user on first login? Answer: If you are using the Authorization Core, you can leverage the Management API in a rule to assign a role based on login count. Example Rule: function (user, context, callback) { const count = context.stats && context.stats.loginsCount ? context.stats.loginsCount : 0; if (count > 1) { return callback(null, user, context); } const ManagementClient = require('auth0@2.27.0').ManagementClient; …

Here is an example domain whitelisting rule:

Auth0 IP Addresses for Allow Lists

Let me know if you need help piecing it together,
Dan