Retrieving Auth0 credentials from Azure Key Vault in Next.js 14

Help
,
1

Hello Auth0 community,

I’m working on a Next.js 14 application and I’m trying to improve the security of my Auth0 integration. My goal is to retrieve the client_id and client_secret from Azure Key Vault instead of storing them in a local .env file.

I’m using the Auth0 SDK for Next.js and have set up a custom handleAuth route. Initially, I thought I could simply fetch the credentials from Azure Key Vault and pass them directly to the handleLogin function like this:

export const GET = handleAuth({
  login: handleLogin({
    authorizationParams: {
      scope: 'openid profile email',
      redirect_uri: redirectUri,
      client_id: 'fetched_client_id_from_azure_key_vault',
    },
    returnTo: '/equipment',
  }),
  // ... other handlers
});

However, I’ve encountered two issues:

  1. Despite the TypeScript intellisense suggesting that client_id is a valid property for authorizationParams, when I add it, I still get a console error: “Uncaught Error: “clientID” is required”.
  2. The official Auth0 documentation doesn’t list client_id as a property of AuthorizationParams.

This leads me to two questions:

  1. Is the Next.js Auth0 SDK’s TypeScript definition potentially misleading by suggesting client_id as a valid property?
  2. What’s the correct way to provide the client_id (and potentially client_secret) to the Auth0 SDK when they’re fetched from an external source like Azure Key Vault, rather than being stored in environment variables?

I’d greatly appreciate any insights or best practices for securely integrating Auth0 with Azure Key Vault in a Next.js 14 application. Thank you in advance for your help!