terraform-auth0-modules

KO | EN

gitlite — search

#python #react #typescript #go #android #rust #deep-learning #linux #macos #awesome #vue #security #ios #mcp

terraform-auth0-modules

(★ 9)

Terraform modules from DasMeta to manage auth0 setup

terraform-auth0-modules 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# terraform-auth0-modules
### This module  allow you to create and manage clients, resource servers(api), client grants, connections, email providers and  rules and  roles, tenants as part of a Terraform deployment.

## Example
[Auth0 multi resources create] (https://github.com/dasmeta/terraform-auth0-modules/tree/main/examples)

## Using credentials from clients in actions

If you need the credentials from one of the managed `clients` for one of your `actions` you can refer to them like this:

```
actions = {
      "test" = {
        code   = file("${path.module}/actions-code/test.js")
        name   = "test"
        deploy = false
        client_secrets = [
          {
            name   = "CLIENT_ID"
            client = "Frontend (Test)"
            output = "client_id"
          }
        ]
      }
    }

...

clients = {
  "Frontend (Test)" = {
    name     = "Frontend (Test)"
    app_type = "non_interactive"
  },

...
```

`name` is the name of the secret which will be created.
`client` is the name of the client which is already managed by this module.
`output` is the name of the output field of the client. The value of the secret is read from this output.

## Requirements

| Name | Version |
|------|---------|
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.15.0 |
| <a name="requirement_auth0"></a> [auth0](#requirement\_auth0) | ~> 1.50 |

## Providers

| Name | Version |
|------|---------|
| <a name="provider_auth0"></a> [auth0](#provider\_auth0) | 1.51.0 |

## Modules

| Name | Source | Version |
|------|--------|---------|
| <a name="module_action"></a> [action](#module\_action) | ./modules/auth0-action | n/a |
| <a name="module_auth0-auth-db"></a> [auth0-auth-db](#module\_auth0-auth-db) | ./modules/auth0-auth-db | n/a |
| <a name="module_auth0-email"></a> [auth0-email](#module\_auth0-email) | ./modules/auth0-email | n/a |
| <a name="module_auth0-goa"></a> [auth0-goa](#module\_auth0-goa) | ./modules/auth0-auth-google | n/a |
| <a name="module_auth0-guardian"></a> [auth0-guardian](#module\_auth0-guardian) | ./modules/auth0-guardian | n/a |
| <a name="module_auth0-org"></a> [auth0-org](#module\_auth0-org) | ./modules/auth0-org | n/a |
| <a name="module_auth0-tenant"></a> [auth0-tenant](#module\_auth0-tenant) | ./modules/auth0-tenant | n/a |
| <a name="module_auth0_api"></a> [auth0\_api](#module\_auth0\_api) | ./modules/auth0-api | n/a |
| <a name="module_auth0_client"></a> [auth0\_client](#module\_auth0\_client) | ./modules/auth0-client | n/a |
| <a name="module_auth0_role"></a> [auth0\_role](#module\_auth0\_role) | ./modules/auth0-role | n/a |
| <a name="module_auth0_users"></a> [auth0\_users](#module\_auth0\_users) | ./modules/auth0-user/ | n/a |

## Resources

| Name | Type |
|------|------|
| [auth0_client_grant.my_client_grant](https://registry.terraform.io/providers/auth0/auth0/latest/docs/resources/client_grant) | resource |
| [auth0_prompt.my_prompt](https://registry.terraform.io/providers/auth0/auth0/latest/docs/resources/prompt) | resource |
| [auth0_trigger_actions.trigger_binding](https://registry.terraform.io/providers/auth0/auth0/latest/docs/resources/trigger_actions) | resource |

## Inputs

| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| <a name="input_actions"></a> [actions](#input\_actions) | Actions are secure, tenant-specific, versioned functions written in Node.js that execute at certain points during the Auth0 runtime. Actions are used to customize and extend Auth0's capabilities with custom logic. | <pre>list(object({ name = string code = string runtime = optional(string, "node16") supported_triggers = optional(any, { id = "post-change-password" version = "v2" }) dependencies = optional(list(any), []) deploy = optional(bool, false) client_secrets = optional(list(object({ name = string client = string output = string })), []) secrets = optional(list(object({ name = string value = string })), []) }))</pre> | `[]` | no |
| <a name="input_apis"></a> [apis](#input\_apis) | With this resource, you can set up APIs that can be consumed from your authorized applications. | <pre>list(object({ name = string scopes = list(any) identifier = string enforce_policies = optional(bool, true) signing_alg = optional(string, "RS256") skip_consent_for_verifiable_first_party_clients = optional(bool, true) token_lifetime = optional(number, 86400) token_lifetime_for_web = optional(number, 7200) token_dialect = optional(string, null) allow_offline_access = optional(bool, false) }))</pre> | `[]` | no |
| <a name="input_client-id"></a> [client-id](#input\_client-id) | Auth0 client id | `string` | n/a | yes |
| <a name="input_client-secret"></a> [client-secret](#input\_client-secret) | Auth0 client secret | `string` | n/a | yes |
| <a name="input_client_grants"></a> [client\_grants](#input\_client\_grants) | Auth0 uses various grant types, or methods by which you grant limited access to your resources to another entity without exposing credentials. | `any` | `[]` | no |
| <a name="input_clients"></a> [clients](#input\_clients) | With this resource, you can set up applications that use Auth0 for authentication and configure allowed callback URLs and secrets for these applications. | <pre>list(object({ name = string app_type = string cross_origin_auth = optional(bool, false) allowed_logout_urls = optional(list(string), []) allowed_origins = optional(list(string), []) callbacks = optional(list(string), []) web_origins = optional(list(string), []) organization_usage = optional(string, null) organization_require_behavior = optional(string, null) custom_login_page_on = optional(bool, false) custom_login_page = optional(string, " ") token_endpoint_auth_method = optional(string, "client_secret_post") grant_types = optional(list(string), ["client_credentials"]) logo_uri = optional(string, null) sso = optional(bool, false) skip_non_verifiable_callback_uri_confirmation_prompt = optional(string, null) jwt_configuration = optional(any, { alg = "RS256" lifetime_in_seconds = "36000" secret_encoded = "false" }) refresh_token = optional(any, { expiration_type = "non-expiring" idle_token_lifetime = "2592000" infinite_idle_token_lifetime = "true" infinite_token_lifetime = "true" leeway = "0" rotation_type = "non-rotating" token_lifetime = "31557600" }) }))</pre> | `[]` | no |
| <a name="input_db_connections"></a> [db\_connections](#input\_db\_connections) | With Auth0, you can define sources of users, otherwise known as connections, which may include identity providers database authentication methods. | <pre>list(object({ name = string password_policy = optional(string, "good") password_history = optional(any, { enable = true, size = 3 }) password_no_personal_info = optional(bool, true) password_dictionary = optional(any, { enable = true, dictionary = [] }) brute_force_protection = optional(bool, true) custom_scripts = optional(any, {}) enabled_database_customization = optional(bool, false) custom_scripts_configuration = optional(any, {}) }))</pre> | `[]` | no |
| <a name="input_domain"></a> [domain](#input\_domain) | Auth0 domain | `string` | n/a | yes |
| <a name="input_emails"></a> [emails](#input\_emails) | With Auth0, you can have standard welcome, password reset, and account verification email-based workflows built right into Auth0. | <pre>list(object({ name = string default_from_address = string access_key_id = optional(string, null) secret_access_key = optional(string, null) region = optional(string, null) api_key = optional(string, null) email_template = optional(any, {}) }))</pre> | `[]` | no |
| <a name="input_google"></a> [google](#input\_google) | With Auth0, you can define sources of users, otherwise known as connections, which may include identity provider Google authentication methods. | `any` | `[]` | no |
| <a name="input_mfa"></a> [mfa](#input\_mfa) | Multi-Factor Authentication works by requiring additional factors during the login process to prevent unauthorized access. | <pre>list(object({ policy = optional(string, "all-applications") email = optional(bool, false) otp = optional(bool, false) recovery_code = optional(bool, false) webauthn_roaming = optional(list(any), []) phone = optional(list(any), []) push = optional(list(any), []) duo = optional(list(any), []) }))</pre> | `[]` | no |
| <a name="input_orgs"></a> [orgs](#input\_orgs) | The Organizations feature represents a broad update to the Auth0 platform that allows our business-to-business (B2B) customers to better manage their partners and customer | <pre>list(object({ name = string display_name = string branding = optional(list(any), []) connections = optional(list(any), []) }))</pre> | `[]` | no |
| <a name="input_prompts"></a> [prompts](#input\_prompts) | With this resource, you can manage your Auth0 prompts, including choosing the login experience version. | `any` | `[]` | no |
| <a name="input_roles"></a> [roles](#input\_roles) | With this resource, you can create and manage collections of permissions that can be assigned to users, which are otherwise known as roles. | `list(any)` | <pre>[ { "description": "Administrator role", "name": "Administrator", "permissions": [] } ]</pre> | no |
| <a name="input_tenant"></a> [tenant](#input\_tenant) | With this resource, you can manage Auth0 tenants | <pre>list(object({ friendly_name = string allowed_logout_urls = optional(list(string), []) default_audience = optional(string, null) picture_url = optional(string, null) enabled_locales = optional(list(string), null) change_password = optional(list(any), []) guardian_mfa_page = optional(list(any), []) default_redirection_uri = string sandbox_version = string error_page = optional(list(any), []) default_directory = optional(string, null) support_email = optional(string, null) support_url = optional(string, null) session_lifetime = optional(number, 168) idle_session_lifetime = optional(number, 72) session_cookie = optional(string, "persistent") skip_non_verifiable_callback_uri_confirmation_prompt = optional(string, null) universal_login = optional(any, []) flags = optional(any, { allow_legacy_delegation_grant_types = "false" allow_legacy_ro_grant_types = "false" allow_legacy_tokeninfo_endpoint = "false" dashboard_insights_view = "false" dashboard_log_streams_next = "false" disable_clickjack_protection_headers = "false" disable_fields_map_fix = "false" disable_management_api_sms_obfuscation = "false" enable_adfs_waad_email_verification = "false" enable_apis_section = "false" enable_client_connections = "false" enable_custom_domain_in_emails = "false" enable_dynamic_client_registration = "false" enable_idtoken_api2 = "false" enable_legacy_logs_search_v2 = "false" enable_legacy_profile = "false" enable_pipeline2 = "false" enable_public_signup_user_exists_error = "false" no_disclose_enterprise_connections = "false" revoke_refresh_token_grant = "false" universal_login = "true" use_scope_descriptions_for_consent = "false" }) }))</pre> | `[]` | no |
| <a name="input_users"></a> [users](#input\_users) | n/a | <pre>list(object({ name = string email = string roles = list(string) password = string }))</pre> | `[]` | no |

## Outputs

| Name | Description |
|------|-------------|
| <a name="output_client_credentials"></a> [client\_credentials](#output\_client\_credentials) | Client credentials for each client created. |

terraform-auth0-modules

terraform-auth0-modules 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

terraform-auth0-modules

terraform-auth0-modules 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README