Introduction

Auth0 is an identity management platform that supports application and microservices security in single sign-on processes with Identity, Access Management offering authentication and authorization integrated into the Devprime platform. This integration is done by the Security adapter.

Follow the steps below to prepare the on-premises environment and perform basic coconfigurations in Auth0 to enable on-premises integration testing with the security mechanism.

Checklist and preperation of the initial environment:

• Open an account on the Devprime platform and purchase a [(Developer/Enterprise)] license(https://devprime.io/pricing).
• Install an updated version of .NET (Linux, macOS, and Windows)
• Install and/or update Visual Studio Code and/or Visual Studio 2023 Community / Professional / Enterprise.
• Install and/or update docker (For Windows, use WSL2).
• Initialize the MongoDB and RabbitMQ containers on docker and add the ‘orderevents’ queue in RabbitMQ.
• Install and activate the latest version of the Devprime CLI.
• Create a folder for your projects and set read and write permissions.
• See the article “Creating the First Microservice” to explore getting started with the Devprime platform.
• Create a Host account on Auth0.com.

Creating an Application in Auth0

After creating the account on Auth0 you will be directed to a private area within the portal with several options for configuration. The first option to be located is the “Applications” menu and then the “Create application” option and you must provide a node as “ms-order” and the type as “Regular Web Applications”

At the end a new “Application” will be created and we will perform some configurations and then use the data in the local microservice to validate the authentication.

Getting an Application’s Settings in Auth0

Now it’s time to get the Auth0 configuration information for use in our application and for that it is necessary to access the “Application > ms-order” and in the option
“Basic Information” get the values of “Domain, Client ID, Client Secret”

Then locate “Application URIs” locate the keys Allowed Call Backurl, Allowed Logout Backurl and Allowed Web Origins and include the values shown in the table

In the same form you will find the option “Cross-Origin Authentication”
which can also be filled with the values “http://*, https://*”.

This is the important moment that needs to save the settings made in the
Auth0.

Next steps:

• Applying Web Security
• Applying security to API’s