hasura/graphql-engine

docs: test for `access_token` in auth0 guide

Open

#3,864 opened on Feb 11, 2020

View on GitHub
 (1 comment) (2 reactions) (0 assignees)TypeScript (31,371 stars) (2,787 forks)batch import
a/authzc/docshelp wanted

Description

Currently, we only have instructions to test the Auth0 login if we use Auth0.js (which generates an id_token): https://docs.hasura.io/1.0/graphql/manual/guides/integrations/auth0-jwt.html#test-auth0-login-and-generate-sample-jwts-for-testing.

We need to come up with a way to test the same also if we use auth0-spa-js (which generates an access_token).

Contributor guide

Tech stack
javascripttypescriptgraphql
Domain
documentationauthentication
Issue type
documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Auth0 basic knowledgeHasura JWT authentication
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
Review the existing Auth0 documentation at https://docs.hasura.io/1.0/graphql/manual/guides/integrations/auth0 jwt.html. Understand how auth0 spa js generates an access token. Then create a new section or update the existing test instructions to cover the access token flow. Consider that the test might require a different endpoint or header compared to the id token method.