search

auth0 / auth0-spa-js

Auth0 authentication for Single Page Applications (SPA) with PKCE
MIT License
903 stars 357 forks source link

Question - auth0-spa-js vs auth0-js #34

Closed andrewoh531 closed 5 years ago

andrewoh531 commented 5 years ago

What's the difference between auth0-spa-js and auth0-js?

I was integrating using auth0-js and recently looked at React samples to see that it was completely different from before and now uses auth0-spa-js instead of auth0-js.

Should I switch over to auth0-spa-js from auth0-js?

stevehobbsdev commented 5 years ago

Hi @andrewoh531,

So auth0-spa-js is a new SDK that has been written from the ground up to support logging in to single page applications. auth0-js does this as well but it also provides a couple of other interfaces seperate from web authentication. So you can think of auth0-spa-js as just being the web authentication part of auth0-js (but has also been rewritten).

The SDK and the new documentation were just released yesterday so I can understand it's a bit frustrating that it has changed right under your feet! However, the old documentation has been migrated to the sample repository so you can still check it out if you wish to continue integrating with auth0-js (look at the readme file for each sample for the tutorial).

There is no requirement per say to switch over. However, you'll reap a number of benefits if you do:

Hopefully that's enough to convince you - please let me know if you have any questions!

andrewoh531 commented 5 years ago

Thanks @stevehobbsdev! That's exactly the info I was looking for!

zmallah commented 5 years ago

I'm noticing there isn't currently an implementation to make a login call with a custom interface or even to use lock, is this integration planned at all or no longer being supported? It would be very helpful for my use case to include a basic login call as present in auth0-js.

luisrudge commented 5 years ago

@zmallah what do you mean by login call with a custom interface? You can still use lock inside your universal login page.

zmallah commented 5 years ago

@luisrudge it was previously possible for me to define my own interface then make a generic login call using auth0-js, where I could pass in my username and password. I do not see this functionality present in the new auth0-spa-js...

luisrudge commented 5 years ago

Perfect. That's what we call ‘Embedded Login’ (https://auth0.com/docs/guides/login/universal-vs-embedded). This SDK only supports Universal Login, which means it will always display your Universal Login Page. For embedded Login, you can still use Auth0.js and Lock.

zmallah commented 5 years ago

Thank you, is there any way at all that this SDK would consider supporting an Embedded Login down the road? The wrapper and hooks used here solve a lot of the headaches I was having with the traditional Auth0.js package...

luisrudge commented 5 years ago

Not at this time. We're thinking on creating smaller SDKs like this one, targeted at more specific use cases like embedded login, use of the management api and hybrid apps, but this is still in the planning phase.

zmallah commented 5 years ago

That sounds like an excellent plan moving forward.

One last question, do you think it would be possible to make login requests auth0-js, but then handling the redirect and session with the new sdk?

luisrudge commented 5 years ago

No, that won't work because both libraries manage their internal state differently.