• Oh... it's got worse.

    So the integrated login client is deprecated https://github.com/auth0/lock-passwordle­ss

    Which means the front-end is now out-of-date, and the backend is now all broken.

    As for what I do today... I use Auth0 only to do the email integration bit... once Auth0 presents me with an authenticated session for a given email address, I lookup the email and then issue my own cookie and maintain my own sessions. So everyone with a cookie will remain logged in.

    It was designed this way to ensure we were not so tightly coupled to Auth0 that we couldn't replace them if need be... so long as I can say "you own this email" I'd issue a cookie.

About

Avatar for Velocio @Velocio started