Wrong audience for Auth0

[peter-volkov]

moesif-developer-portal/my-dev-portal/src/components/pages/keys/Auth0Keys.js

Line 39 in a9341d1

audience: `http://127.0.0.1:3030`, // replace with your API identifier

@matthewtanner91
Shouldn't it be changed to something like process.env.REACT_APP_AUTH0_API_AUDIENCE
?

Because otherwise Auth0 with return "{ error: "access_denied", errorDescription: "Service not found: http://127.0.0.1:3030", state: "0pxyoUsOXEdEf6MMfy4eZwKgefhfc2Iw" }

[matthewtanner91]

@peter-volkov this is because you’ll have to add the API in Auth0. I believe this is documented in the readme but let me check. You may see a quick PR pop up for this when I’m back online describing the steps in the readme or with a slight code change. Stay tuned.

[peter-volkov]

Yes. The doc says

On the next page that appears, select the Settings tab. In the settings tab, scroll down to the Application URIs section. In this section you’ll need to add http://127.0.0.1:4000, or the URL where your developer portal will be hosted, as an entry for Allowed Callback URLs, Allowed Logout URLs, and Allowed Web Origins.

And I did it. Still get "Service not found" response from Auth0.

I set there management URL ( https://dev-jy6v3fnerbvyxy6p.us.auth0.com/api/v2/ in my case )
as it is recommended in
https://community.auth0.com/t/error-access-denied-errordescription-service-not-found/105583/3
When I set it, it starts the Oauth flow at least.

[srmeier]

Faced a similar issue with audience URL in Auth0ProviderWithNavigate.js, setting it to REACT_APP_AUTH0_AUDIENCE addressed the issue.

[xinghengwang]

yes.

moesif-developer-portal/my-dev-portal/src/Auth0ProviderWithNavigate.js

Line 21 in a0aa11b

audience: process.env.REACT_APP_DEV_PORTAL_API_SERVER,

The audience needs to be defined in envionrment variable

authorizationParams={{
    redirect_uri: window.location.origin,
    audience: process.env.REACT_APP_DEV_PORTAL_API_SERVER,
    scope: "openid profile email offline_access", // Request offline_access scope
  }}

And in your Auth0 account, you need to create an "application" that correspond to this audience. https://auth0.com/docs/get-started/applications