Several of our customers use Auth0 to manage their user accounts across multiple social providers as well as usernames & passwords seamlessly. Behind the scenes, we do too. But it's not immediately obvious how to get Auth0 working once you've started deploying preview URLs on every commit.
The difficulty comes from the fact that in your "Application" settings in Auth0, you typically restrict login flows from your own, production domain:
But with Linc, you suddenly have a new domain for every commit:
Thankfully, the solution is as simple as adding a wildcard for configuration of the Auth0 settings:
--CODE:language-bash--
https://your-app-name.com, https://your-app-name--*.linc-preview.sh
Note, it is important to include the double dashes (--) after your site's name, that's Linc's way of guaranteeing that only your site's preview URLs will match the pattern.
This is what it looks like in your settings page:
Advanced options
Linc doesn't just generate URLs per commit, but also produces branch and release preview URLs:
The above configuration setting will work fine for these, but optionally you might like to lock down access further:
--CODE:language-bash--
# Only allow per-commit preview URLs against the staging environment:
https://your-app-name--*--staging.linc-preview.sh
--CODE:language-bash--
# Allow "development" branch to be previewed against any environment:
https://your-app-name--development--*.branch.linc-preview.sh
Either way, Auth0's settings gives you the flexibility you need to control exactly which Preview URLs have access to your application!
