Merge pull request #335 from auth0/feat/add-my-account-env-support-rwa

feat(examples): update nextjs lib env to support my account

Author: NaveenChand755

examples/next-rwa/.env.example

@@ -5,7 +5,6 @@ APP_BASE_URL='http://localhost:5173'
 AUTH0_DOMAIN='https://your-domain.auth0.com'
 AUTH0_CLIENT_ID='your-client-id'
 AUTH0_CLIENT_SECRET='your-client-secret'
-AUTH0_SCOPE='openid profile email offline_access read:my_org:details update:my_org:details read:my_org:identity_providers create:my_org:identity_providers update:my_org:identity_providers delete:my_org:identity_providers update:my_org:identity_providers_detach read:my_org:configuration read:my_org:identity_providers_provisioning create:my_org:identity_providers_provisioning delete:my_org:identity_providers_provisioning create:my_org:identity_providers_domains delete:my_org:identity_providers_domains read:my_org:identity_providers_scim_tokens create:my_org:identity_providers_scim_tokens delete:my_org:identity_providers_scim_tokens read:my_org:domains delete:my_org:domains create:my_org:domains update:my_org:domains create:me:authentication_methods read:me:authentication_methods delete:me:authentication_methods update:me:authentication_methods read:me:factors'
 
 # Auth0 Configuration - Public and exposed to the Browser
 NEXT_PUBLIC_AUTH0_DOMAIN='metcodermyorg.test-iamda-myorgapipocweek1.auth0c.com'

examples/next-rwa/src/lib/auth0.ts

@@ -21,14 +21,49 @@ function validateEnvVars() {
 // Validate environment variables on module load
 validateEnvVars();
 
+const BASE_SCOPES = 'openid profile email offline_access';
+
+const MY_ACCOUNT_SCOPES = [
+  'create:me:authentication_methods',
+  'read:me:authentication_methods',
+  'update:me:authentication_methods',
+  'delete:me:authentication_methods',
+  'read:me:factors',
+];
+
+const MY_ORG_SCOPES = [
+  'read:my_org:details',
+  'update:my_org:details',
+  'create:my_org:identity_providers',
+  'read:my_org:identity_providers',
+  'update:my_org:identity_providers',
+  'delete:my_org:identity_providers',
+  'update:my_org:identity_providers_detach',
+  'read:my_org:domains',
+  'delete:my_org:domains',
+  'create:my_org:domains',
+  'update:my_org:domains',
+  'create:my_org:identity_providers_domains',
+  'delete:my_org:identity_providers_domains',
+  'read:my_org:identity_providers_scim_tokens',
+  'create:my_org:identity_providers_scim_tokens',
+  'delete:my_org:identity_providers_scim_tokens',
+  'create:my_org:identity_providers_provisioning',
+  'read:my_org:identity_providers_provisioning',
+  'delete:my_org:identity_providers_provisioning',
+  'read:my_org:configuration',
+];
+
+const domain = process.env.AUTH0_DOMAIN?.replace(/\/$/, '');
+
 export const auth0 = new Auth0Client({
   httpTimeout: 20000, // 20 seconds
   authorizationParameters: {
-    scope: process.env.AUTH0_SCOPE || 'openid profile email offline_access',
-
-    ...(process.env.AUTH0_DOMAIN && {
-      audience: `${process.env.AUTH0_DOMAIN.replace(/\/$/, '')}/my-org/`,
-    }),
+    audience: domain ? `${domain}/my-org/` : undefined,
+    scope: {
+      [`${domain}/me/`]: `${BASE_SCOPES} ${MY_ACCOUNT_SCOPES.join(' ')}`,
+      [`${domain}/my-org/`]: `${BASE_SCOPES} ${MY_ORG_SCOPES.join(' ')}`,
+    },
   },
   // Using SDK defaults: rolling: true, absoluteDuration: 3 days, inactivityDuration: 1 day
 });