nextjs-auth0 | Next.js SDK for signing in with Auth0 | Authentication library

If I understand correctly, you are asking how to make an api call inside your component? If yes, below is an example.

So, some security tips from me (beware that I am not an security expert, just code web apps a lot):

• Use bcrypt (https://www.npmjs.com/package/bcrypt). It is the best simple & secure module I have seen until now.
• If you are using nodejs (which you are probably) and if you setted up your app with express, you can use express-ratelimit middleware to avoid spam.
• To be honest, securing GET was a headache for me. Because internet is open by design, it is hard to disallow content sometimes. You can either:
  • Whitelist only your ip (if it is static) or match it with your user-agent etc. and disallow all other IPs. Note that this might be a trouble if you want to work on travel.
  • Use temporary bearer tokens that is for one time use. Note that if your db holding these or the token generator gets hacked, your whole app may fall, so be cautious.
• The only login no register is easy. Just enter the credintials in your database manually.
• Personally, I think you don't need to connect everything to a single domain. Set up a local (or not) dashboard and directly PUT users from there. Again, only whitelist your ip and disallow others.

It's not an error, it's a warning

This warning is decribed here, no simple solution

P.S. I have the same stuff in my projects, waiting for update fix. This bug appeared in next^12.0.2 version

After I posted a feature request to include the ID token inside a cookie, I figured the "appSession" cookie that's set by nextjs-auth0 is an encrypted token which includes the ID token, I implemented custom server logic using the nextjs-auth0 source code as reference:

I was finally able to get approval from Google and wanted to share for the rest of the Googlers out there.

To get approval when checking the Contacts box in Auth0:

I needed to request this scope from Google:

After see other examples I just edited manually the package.json.

After run npm install @auth0/nextjs-auth0 the package was automatically added "@auth0/nextjs-auth0": "github:auth0/nextjs-auth0",.

I just edit to

You can move the logic to a separate component that would wrap your page Component.

The key is the last part of the error,

Did you mean to write 'clientID'?

In your config object, you have written clientId (note the lowercase d), the config object accepted by initAuth0, however, expects clientID.

One of the most frustrating things about TypeScript is the overbearing error messages. I hope they improve them in the future.

Unfortunately, the env variable clientSecret: process.env.AUTH0_CLIENT_SECRET was disabled on production build somehow.