Migration von Auth0

# Export-Job erstellen
curl -X POST https://IHR_AUTH0_DOMAIN/api/v2/jobs/users-exports \
  -H "Authorization: Bearer $AUTH0_MANAGEMENT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "format": "json",
    "fields": [
      { "name": "user_id" },
      { "name": "email" },
      { "name": "email_verified" },
      { "name": "name" },
      { "name": "given_name" },
      { "name": "family_name" },
      { "name": "created_at" },
      { "name": "app_metadata" }
    ]
  }'

// transform-auth0-users.ts
import fs from 'fs'
 
interface Auth0User {
  user_id: string
  email: string
  email_verified: boolean
  name: string
  given_name: string
  family_name: string
  created_at: string
}
 
interface AurisImportUser {
  email: string
  firstName: string
  lastName: string
  emailVerified: boolean
}
 
const auth0Users: Auth0User[] = JSON.parse(
  fs.readFileSync('auth0-export.json', 'utf-8')
)
 
const aurisUsers: AurisImportUser[] = auth0Users.map((user) => ({
  email: user.email,
  firstName: user.given_name || user.name?.split(' ')[0] || '',
  lastName: user.family_name || user.name?.split(' ').slice(1).join(' ') || '',
  emailVerified: user.email_verified,
}))
 
fs.writeFileSync('auris-import.json', JSON.stringify(aurisUsers, null, 2))
console.log(`${aurisUsers.length} Benutzer transformiert`)

curl -X POST https://auth.ihredomain.com/api/users/import \
  -H "Authorization: Bearer $AURIS_ACCESS_TOKEN" \
  -H "x-tenant: ihr-tenant-id" \
  -F "[email protected]" \
  -F "format=json"

# Auth0 entfernen
npm uninstall @auth0/auth0-spa-js @auth0/auth0-react @auth0/nextjs-auth0
 
# Auris installieren
npm install @auris/js @auris/react
# Für Next.js:
npm install @auris/nextjs

// VORHER (Auth0)
import { Auth0Provider } from '@auth0/auth0-react'
 
function App() {
  return (
    <Auth0Provider
      domain="ihr-tenant.auth0.com"
      clientId="auth0-client-id"
      authorizationParams={{ redirect_uri: window.location.origin + '/callback' }}
    >
      <MyApp />
    </Auth0Provider>
  )
}
 
// NACHHER (Auris)
import { AurisProvider } from '@auris/react'
 
function App() {
  return (
    <AurisProvider
      domain="auth.ihrUnternehmen.com"
      clientId="auris-client-id"
      redirectUri={window.location.origin + '/callback'}
    >
      <MyApp />
    </AurisProvider>
  )
}

// VORHER (Auth0)
import { useAuth0 } from '@auth0/auth0-react'
 
const { loginWithRedirect, logout, user, isAuthenticated, getAccessTokenSilently } = useAuth0()
 
// NACHHER (Auris)
import { useAuris } from '@auris/react'
 
const { loginWithRedirect, logout, user, isAuthenticated, getAccessToken } = useAuris()

// VORHER (Auth0)
import { withMiddlewareAuthRequired } from '@auth0/nextjs-auth0/edge'
export default withMiddlewareAuthRequired()
 
// NACHHER (Auris)
import { aurisMiddleware } from '@auris/nextjs/middleware'
export default aurisMiddleware({
  protectedPaths: ['/dashboard(.*)'],
  publicPaths: ['/', '/about', '/pricing'],
  loginUrl: '/auth/login',
})

// Auth0 Action (post-login)
exports.onExecutePostLogin = async (event, api) => {
  if (!event.user.email_verified) {
    api.access.deny('Bitte verifiziere deine E-Mail, bevor du dich anmeldest.')
  }
  api.idToken.setCustomClaim('https://myapp.com/role', event.user.app_metadata.role)
}

// Auris Action (post-login-Trigger)
async function action(context) {
  if (!context.user.emailVerified) {
    return { deny: true, message: 'Bitte verifiziere deine E-Mail, bevor du dich anmeldest.' }
  }
 
  return {
    claims: {
      role: context.user.metadata?.role || 'user'
    }
  }
}

curl -X POST https://auth.ihredomain.com/api/roles \
  -H "Authorization: Bearer $AURIS_ACCESS_TOKEN" \
  -H "x-tenant: ihr-tenant-id" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Editor",
    "description": "Kann Inhalte bearbeiten",
    "color": "#3B82F6"
  }'