We have developed an open source Nextjs application using Auth0 to handle our authentication. We have others in our community who would like to contribute, though we are not exactly sure how to handle to Auth0 side of things. Obviously we can’t provide them with our keys. What are some preferred way…

Hey again @brettski , He have a delegated admin extension, but it doesn’t have full customizability. You can always build out your own admin dash with the management API. [image] Delegated Administration Extension v3 Learn how to use the Delegated Administration Extension (DAE) to expos…

Hello again @dan.woda , thank you for the response. So this extension helps provide access to users in the Auth0 dashboard, though I don’t understand how this could help them run the software locally to develop it. Is the practice to use dev keys from a dev tenant, or mock out the login? I hope my q…

Can you give an example of an action that your developers are trying to take? What do they need access to? I think I misunderstood your situation with my initial response.

split discussion, that’s a nice feature! Back to this. My thoughts are around any areas of the site which require authentication. External developers will need the ability to test what the are working on, which means needing an access_token to validate they are active and have permissions for that …

@brettski , Yes it is! Helps keep things focused. On to your question. I think I understand what you mean, let me confirm. For example, an open source developer that you do not inherently trust needs to test their application against an API you have set up. You want to allow them to test this, but …

Hey @dan.woda ! @brettski and I are working together on this but I’d thought I’d ask the question a bit different than he did. It’s not really about trust of any individual but more about overall secret management and making sure we do the right thing with our production app/api keys. Given that, …

Hi @that ! I think I have a better grasp of the situation now. I am thinking you would be okay creating a seperate dev tenant, this would seperate your users from the open source developers, but allow for testing. Let me reach out to the field team and get their feedback. I’ll update here when I hea…

@dan.woda we appreciate that. It feels like it comes down to key management assuming we want folks to be able to sign-in and do development on those parts of the website. We certainly aren’t the only folks trying to do something like this. For reference - GitHub - ThatConference/that-website: THAT …

Okay, I’m back. The guidance given to me is to have devs create their own free Auth0 accounts and provide them with instructions for configuring the application. Would that work for you?

Interesting approach. That easily works ( could be totally wrong here ) in the scenario where it’s just the website but then you add an api, and now you’ve got a lot of setup to do, scopes, domains, app/api. I know it took us a bit of time just to get things right. For folks who just want to contr…

Managing an open source project which uses Auth0

Get Help

Topic		Replies	Views
Using hobby project in production under free plan - is dev tenant key unsafe for my ~20 users? Get Help request-for-information , subscription-billing	2	890	December 15, 2023
How can i set up up local development with Auth0 . i.e (no internet required) Get Help	2	4725	August 26, 2019
Auth0 delegated admin dashboard running as self-hosted? Get Help delegated-admin	2	3448	September 4, 2019
Multiple tenants/customers - Best Practise Get Help auth0	9	2555	April 27, 2021
Local disconnected development Get Help development	2	2187	October 11, 2021

Managing an open source project which uses Auth0

Related topics