Migrazione da Auth0

# Crea un job di esportazione
curl -X POST https://TUO_DOMINIO_AUTH0/api/v2/jobs/users-exports \
  -H "Authorization: Bearer $AUTH0_MANAGEMENT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "format": "json",
    "fields": [
      { "name": "user_id" },
      { "name": "email" },
      { "name": "email_verified" },
      { "name": "name" },
      { "name": "given_name" },
      { "name": "family_name" },
      { "name": "created_at" },
      { "name": "app_metadata" },
      { "name": "user_metadata" }
    ]
  }'

# Controlla lo stato dell'esportazione
curl https://TUO_DOMINIO_AUTH0/api/v2/jobs/JOB_ID \
  -H "Authorization: Bearer $AUTH0_MANAGEMENT_TOKEN"
 
# Quando lo stato è "completed", scarica il file dall'URL location

// transform-auth0-users.ts
import fs from 'fs'
 
interface Auth0User {
  user_id: string
  email: string
  email_verified: boolean
  name: string
  given_name: string
  family_name: string
  created_at: string
  app_metadata: Record<string, unknown>
  user_metadata: Record<string, unknown>
}
 
interface AurisImportUser {
  email: string
  firstName: string
  lastName: string
  emailVerified: boolean
}
 
const auth0Users: Auth0User[] = JSON.parse(
  fs.readFileSync('auth0-export.json', 'utf-8')
)
 
const aurisUsers: AurisImportUser[] = auth0Users.map((user) => ({
  email: user.email,
  firstName: user.given_name || user.name?.split(' ')[0] || '',
  lastName: user.family_name || user.name?.split(' ').slice(1).join(' ') || '',
  emailVerified: user.email_verified,
}))
 
fs.writeFileSync('auris-import.json', JSON.stringify(aurisUsers, null, 2))
console.log(`Trasformati ${aurisUsers.length} utenti`)

curl -X POST https://auth.tuodominio.com/api/users/import \
  -H "Authorization: Bearer $AURIS_ACCESS_TOKEN" \
  -H "x-tenant: tuo-tenant-id" \
  -F "[email protected]" \
  -F "format=json"

# Rimuovi Auth0
npm uninstall @auth0/auth0-spa-js @auth0/auth0-react @auth0/nextjs-auth0
 
# Installa Auris
npm install @auris/js @auris/react
# Per Next.js:
npm install @auris/nextjs

// PRIMA (Auth0)
import { Auth0Provider } from '@auth0/auth0-react'
 
function App() {
  return (
    <Auth0Provider
      domain="tuo-tenant.auth0.com"
      clientId="auth0-client-id"
      authorizationParams={{
        redirect_uri: window.location.origin + '/callback',
      }}
    >
      <MyApp />
    </Auth0Provider>
  )
}
 
// DOPO (Auris)
import { AurisProvider } from '@auris/react'
 
function App() {
  return (
    <AurisProvider
      domain="auth.tuazienda.com"
      clientId="auris-client-id"
      redirectUri={window.location.origin + '/callback'}
    >
      <MyApp />
    </AurisProvider>
  )
}

// PRIMA (Auth0)
const { loginWithRedirect, logout, user, isAuthenticated, isLoading, getAccessTokenSilently } = useAuth0()
 
// DOPO (Auris)
const { loginWithRedirect, logout, user, isAuthenticated, isLoading, getAccessToken } = useAuris()
 
// Il logout è leggermente diverso:
// Auth0: logout({ logoutParams: { returnTo: window.location.origin } })
// Auris: logout({ returnTo: window.location.origin })

// PRIMA (Auth0)
const token = await getAccessTokenSilently()
 
// DOPO (Auris)
const token = await getAccessToken()
 
// Il resto del codice API rimane invariato
const response = await fetch('/api/protected', {
  headers: { Authorization: `Bearer ${token}` },
})

// PRIMA (Auth0 — controllo manuale del claim)
const { user } = useAuth0()
const hasPermission = user?.['https://myapp.com/permissions']?.includes('read:data')
 
// DOPO (Auris — hook permessi integrato)
import { useCheckPermission } from '@auris/react'
 
const canReadData = useCheckPermission('read:data')

// PRIMA (Auth0)
import { withMiddlewareAuthRequired } from '@auth0/nextjs-auth0/edge'
export default withMiddlewareAuthRequired()
 
// DOPO (Auris)
import { aurisMiddleware } from '@auris/nextjs/middleware'
export default aurisMiddleware({
  protectedPaths: ['/dashboard(.*)'],
  publicPaths: ['/', '/about', '/pricing'],
  loginUrl: '/auth/login',
})

// Auth0 Action (post-login)
exports.onExecutePostLogin = async (event, api) => {
  if (!event.user.email_verified) {
    api.access.deny('Verifica la tua email prima di accedere.')
  }
  api.idToken.setCustomClaim('https://myapp.com/role', event.user.app_metadata.role)
}

// Auris Action (trigger post-login)
async function action(context) {
  if (!context.user.emailVerified) {
    return { deny: true, message: 'Verifica la tua email prima di accedere.' }
  }
  return {
    claims: {
      role: context.user.metadata?.role || 'user'
    }
  }
}

# Elenca i ruoli Auth0
curl https://TUO_DOMINIO_AUTH0/api/v2/roles \
  -H "Authorization: Bearer $AUTH0_MANAGEMENT_TOKEN"

curl -X POST https://auth.tuodominio.com/api/roles \
  -H "Authorization: Bearer $AURIS_ACCESS_TOKEN" \
  -H "x-tenant: tuo-tenant-id" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Editor",
    "description": "Può modificare i contenuti",
    "color": "#3B82F6"
  }'