Using Auth0 to secure my express backend

[dashboardagencyllc]

I’m new to Auth0 so please bear with me. I have a static front-end which is hosted in a basic CDN like netlify. I have an express back-end which I serve data to the front-end/process requests from the front-end. I currently have my application set as web-application, utilizing the express-openid-connect middleware which I have the basic /login /logout endpoints. That’s where my “knowledge” ends. I am currently extremely confused as how to

• redirect to myfrontend.com instead of myfrontend.com/callback
• when I make requests from the front end such as fetch(‘mybackend.com/users/@me’) I get an unauthenticated error (which I throw myself but the request is definitely not authenticated)

Any help would be appreciated, thanks in advance.

[rueben.tiow]

Hi @dashboardagencyllc,

Welcome to the Auth0 Community!

I understand that you have some clarifying questions about how to use Auth0.

First, to redirect your users to your desired callback URL you will need to specify the redirect_uri in the /authorize request and then include that URL in the Allowed Callback List in your Application on the Auth0 Dashboard.

Below is an example of the /authorize request:

https://YOUR_DOMAIN/authorize?
    response_type=code&
    client_id=YOUR_CLIENT_ID&
    redirect_uri=https://myfrontend.com&
    scope=SCOPE&
    state=STATE

See our docs on redirecting users after login for more details.

Next, have you had the chance to take a look at Auth0’s Quickstarts for Node.js (express)?

You can find the Quickstarts in your Auth0 Dashboard > Applications > YOUR APP > Quickstart.

Alternatively, you can find the equivalent Quickstart in our documentation here.

Lastly, you may find this sample express web app repo useful: https://github.com/auth0-samples/auth0-express-webapp-sample.

Hoped this helps! Please let me know there are any questions. I would be happy to clarify.

Thank you.