Hasura + Auth0 tutorial including multi-role setup and testing/debugging with jwt.io.

This video tutorial is perfect if you want to get started with integrating auth0 and Hasura. This video also shows you how to setup and test with Auth0 without doing a UI integration so that you can try things out quickly.

Topics covered:
1. Creating an account on Auth0
2. Login with Auth0 to create a JWT (without building a UI)
3. Create permissions to enforce authorization on Hasura
4. Add Hasura claims to Auth0 JWTs using Rules
5. Testing GraphQL authz using JWT via the console
6. Multi-role authorization

[angelbythewings]

This tutorial does cover almost everything that I had a hard time understanding, Thanks a lot Tanmai

[oldschoolshoe]

Many thanks for this overview with the specific implementation steps. It’s notable how many tutorials and articles bypass setting up authentication with GraphQL. I’m still working through the exact steps to implement what was shown here, but having a perspective on how authentications fits in with the whole data workflow for an application is valuable. Thank you.

[mike]

If you get a "oops, something went wrong error" at 4:00 try disabling the "OIDC Conformant" setting from Settings -> Show Advanced Settings -> Oauth.

[CoryTheSimmons]

Hot damn this was perfectly timed I love you guys. :D

[arsalanshaikh]

Thanks for this awesome tutorial hasura is very promising please do a video on developing a graph ql
backend with hasura locally.Thanx love from Pune

[TarasShevchenkoStep]

Wow! Genius... So complicated steps )) And not so simple as I think. Very interesting if it can be optimized by scripts. And with free passport.js But anyway thank you! Great video!!!

[LetterSignedBySpiesWasA-Coup]

Great overview. Would you happen to know of an example that sets different roles for different users? for example: user, admin, superadmin

[creative-commons-videos]

am I stuck with Auth0, what if I don't want to use it and instead want to use custom jwt nodejs api ?? how to use that ?

[sarathbaiju]

Could you make an upgrade version of this content.?

[FelipeCosta]

Thanks for this video and for this incredible piece of software, Hasura is amazing.
How can I make a request to Hasura from Auth0 during the Rule execution to get some metadata information from my database that I want to use to compose the token?
The restriction is that I don't want to use admin secret to make the request, neither anonymous queries.

[budavargas]

Any chances of this tutorial being updated?

[kaiprism]

Does this tutorial applicable in react native?

[noelsoong]

Hi I don't seem to have a query param for accesstoken

[thechen]

Update: Dont put the HASURA_GRAPHQL_JWT_SECRET env variable on Heroku, instead go to the project details in Hasura itself and add it over there. This took me 0.5 days to find out. NEVER use the HASURA_ADMIN_SECRET in your environment to enforce the authentication! This was a solution I unfortunately saw a few times.

full thread on github. @t