Angular with Auth0 integration | Angular Community | Page 1

proper warren Dec 5, 2022, 2:12 PM

#

I'm trying to pass the user.sub value from auth0 through a form to be sent in a post request but my form control name is restricting me from setting the value in the form. I also cant seem to find out how to access auth0 user.sub from ts as that would also solve my issue.

pseudo sparrow Dec 5, 2022, 2:13 PM

#

proper warren I'm trying to pass the user.sub value from auth0 through a form to be sent in a ...

👋 U can use the user$ observable exposed on the AuthService.

#

That has the sub claim.

#

const sub$ = this.auth.user$.pipe(map(user => user.sub));

#

Curious why u need the users sub to be sent tho.

#

Sounds insecure, why not read it from the token server side ?

proper warren Dec 5, 2022, 2:17 PM

#

Im unsure how to do that

pseudo sparrow Dec 5, 2022, 2:17 PM

#

The idea of a token is to prove who u are

#

Sending ur id as an identification outside of it makes it easy to tamper with

#

Are u sending the token to the backend ?

proper warren Dec 5, 2022, 2:18 PM

#

Yeah

pseudo sparrow Dec 5, 2022, 2:19 PM

#

The backend should allready know the sub of the user

#

As it's inside the token

proper warren Dec 5, 2022, 2:19 PM

#

How would I access it from the back-end?

pseudo sparrow Dec 5, 2022, 2:19 PM

#

I hope you are already validating the token .

#

But it will depend on the frameworks used

proper warren Dec 5, 2022, 2:21 PM

#

pseudo sparrow `const sub$ = this.auth.user$.pipe(map(user => user.sub));`

This is just for a test kinda thing I'm working on atm I think using this will be sufficient. The only issue im having is that it is inside an object. How would I be able to access it?

pseudo sparrow Dec 5, 2022, 2:22 PM

#

proper warren This is just for a test kinda thing I'm working on atm I think using this will b...

It's a bad idea tho.

#

Read it from the token, as it should be.

#

Happy to show u how, if u would elaborate on the backend framework being used

proper warren Dec 5, 2022, 2:23 PM

#

Im using flask atm

pseudo sparrow Dec 5, 2022, 2:24 PM

#

https://auth0.com/docs/quickstart/backend/python/01-authorization

Auth0 Docs

Auth0 Python API SDK Quickstarts: Authorization

This tutorial demonstrates how to add authorization to a Python API built with Flask.

#

So u use the angular SDK on the angular side, and what's mentioned in the python quickstart in the python side.

#

Both will expose the info of the user

#

I believe the python code in the link should expose things on _request_ctx_stack.top.current_user.

#

So if u have everything set up, all your application should do is take the sub from the requests current_user on python side.

pseudo sparrow Dec 6, 2022, 7:54 AM

#

Seems like little to do with the issue at hand, nor does it mention angular.

#Angular with Auth0 integration