M2M Client Credentials

import { AurisClient } from '@auris/js'
 
const auris = new AurisClient({
  domain: process.env.AURIS_DOMAIN,
  clientId: process.env.AURIS_CLIENT_ID,
})
 
// M2M-Access-Token mit bestimmten Scopes anfordern
const token = await auris.getM2MToken(
  process.env.AURIS_CLIENT_SECRET,
  ['read:users', 'manage:roles'],
)
 
console.log('Access Token:', token.accessToken)
console.log('Läuft ab in:', token.expiresIn, 'Sekunden')
 
// Token verwenden, um die Auris Management API aufzurufen
const usersResponse = await fetch('https://auth.yourdomain.com/api/users', {
  headers: { Authorization: `Bearer ${token.accessToken}` },
})
const users = await usersResponse.json()

import { createManagementClient } from '@auris/js'
 
// Komfort-Wrapper, der Token-Beschaffung automatisch verwaltet
const management = await createManagementClient({
  domain: process.env.AURIS_DOMAIN,
  clientId: process.env.AURIS_CLIENT_ID,
  clientSecret: process.env.AURIS_CLIENT_SECRET,
})
 
// Vollständiges CRUD für Benutzer
const users = await management.users.list({ page: 1, limit: 50 })
const user = await management.users.getById('user-id')
const newUser = await management.users.create({
  email: '[email protected]',
  firstName: 'Alice',
  roles: ['viewer'],
})
 
// Vollständiges CRUD für Organisationen
const orgs = await management.organizations.list()
const orgMembers = await management.organizations.listMembers('org-id')
 
// Rollenverwaltung
const roles = await management.roles.list()
await management.roles.assignToUser('user-id', 'role-id')

// Serverseitigen Management-Client in Route Handlers oder Server Components verwenden
import { createServerManagementClient } from '@auris/nextjs/server'
 
// In einem Route Handler
export async function GET() {
  // Verwendet automatisch AURIS_CLIENT_ID, AURIS_CLIENT_SECRET, AURIS_DOMAIN Umgebungsvariablen
  const management = await createServerManagementClient()
 
  const users = await management.users.list()
  return Response.json(users)
}
 
// In einer Server Component
export default async function AdminPage() {
  const management = await createServerManagementClient()
  const users = await management.users.list({ limit: 10 })
 
  return (
    <ul>
      {users.data.map((user) => (
        <li key={user.id}>{user.email}</li>
      ))}
    </ul>
  )
}

# M2M-Token direkt vom Token-Endpunkt anfordern
curl -X POST https://auth.yourdomain.com/api/auth/token \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=client_credentials" \
  -d "client_id=your-client-id" \
  -d "client_secret=your-client-secret" \
  -d "scope=read:users manage:roles"
 
# Antwort:
# {
#   "access_token": "eyJhbGciOiJSUzI1NiJ9...",
#   "token_type": "Bearer",
#   "expires_in": 3600,
#   "scope": "read:users manage:roles"
# }
 
# Token verwenden
curl -X GET https://auth.yourdomain.com/api/users \
  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiJ9..."