search

pow-auth / assent

Multi-provider framework in Elixir
https://powauth.com
MIT License
391 stars 45 forks source link

Auth0: Support Variable-Length Access Token and Authorization Codes #102

Closed djthread closed 2 years ago

djthread commented 2 years ago

Hello Dan & Pow crew!

I've found tremendous value in this library and I've just realized I should be pushing for us to sponsor the project!

Auth0 has notified me about a deprecation in their API for fixed length access tokens and authorization codes. They're apparently doing a hard cut-over on April 12th. At that point, I expect things will stop working properly as my Auth0 log says the following when I log in:

Fixed Length of Access Token & Authorization Code: This feature is being deprecated. Please see https://auth0.com/docs/product-lifecycle/deprecations-and-migrations#opaque-access-token-for-userinfo for more information.

What's the best course of action to make sure I remain compatible? I'm going to need to dig in deeper, but this is a bit foreign to me. I could certainly use a hand!

And thank you so much for the time & energy put into the pow/assent ecosystem.

Adam

djthread commented 2 years ago

Oh hey! So I had interpreted this to mean that I was leveraging the deprecated feature and this was the reason for the log entry, but I went to Auth0's settings -> advanced and turned off the Fixed Length of Access Token & Authorization Code toggle. I expected logging in after this to fail, but it still works.

It would appear my application is good to go for the transition!

Sorry for the noise :)

Many thanks 🙏