butterfly/moxie-site
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix Auth0 authentication: remove audience parameter for simpler OIDC flow

Browse Source
This commit is contained in:
Z User 2026-03-27 23:25:13 +00:00
parent 4e0dd4c107
commit efd6d519ce
2 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
js/auth.js
View File

@ -166,12 +166,16 @@ class MoxieAuth {
const redirectUri = returnTo || window.location.origin + '/dashboard.html'; const redirectUri = returnTo || window.location.origin + '/dashboard.html';
// Build Auth0 authorize URL // Build Auth0 authorize URL
const authUrl = `https://${CONFIG.auth0.domain}/authorize?` + let authUrl = `https://${CONFIG.auth0.domain}/authorize?` +
`response_type=code&` + `response_type=code&` +
`client_id=${CONFIG.auth0.clientId}&` + `client_id=${CONFIG.auth0.clientId}&` +
`redirect_uri=${encodeURIComponent(redirectUri)}&` + `redirect_uri=${encodeURIComponent(redirectUri)}&` +
`scope=openid%20profile%20email&` + `scope=openid%20profile%20email`;
`audience=${encodeURIComponent(CONFIG.auth0.audience)}`;
// Only add audience if it's defined and not empty
if (CONFIG.auth0.audience && CONFIG.auth0.audience.trim() !== '') {
authUrl += `&audience=${encodeURIComponent(CONFIG.auth0.audience)}`;
}
window.location.href = authUrl; window.location.href = authUrl;
} }

4
js/config.js
View File

@ -8,7 +8,9 @@ const CONFIG = {
auth0: { auth0: {
domain: 'dev-t13zhs74oltgqtfx.us.auth0.com', domain: 'dev-t13zhs74oltgqtfx.us.auth0.com',
clientId: 'AWRYU8EBnKaHvRQOMXXADxgGEoBN45oN', clientId: 'AWRYU8EBnKaHvRQOMXXADxgGEoBN45oN',
audience: 'https://dev-t13zhs74oltgqtfx.us.auth0.com/api/v2/', // Leave audience empty for standard OpenID Connect authentication
// Or set to your custom API identifier if you created one in Auth0
audience: '',
redirectUri: window.location.origin + '/dashboard.html', redirectUri: window.location.origin + '/dashboard.html',
logoutUri: window.location.origin logoutUri: window.location.origin
}, },