colllin

Auth0 + FaunaDB ABAC integration: How to expire Fauna user secrets.

Fauna doesn't (yet?) provide guaranteed expiration/TTL for ABAC tokens, so we need to implement it ourselves if we care about it.

What's in the box?

3 javascript functions, each of which can be imported into your project or run from the command-line using node path/to/script.js arg1 arg2 ... argN:

1. deploy-schema.js: a javascript function for creating supporting collections and indexes in your Fauna database.

colllin

Goal

• use Auth0 for logins
• retrieve a Fauna instance secret for the user (see Fauna's ABAC tutorial)
• have the user’s device talk directly to Fauna's native graphql endpoint using their secret for authorization.

Solutions

At the very least, we need two pieces of functionality:

1. Create a user document in Fauna to represent each Auth0 user.
2. Exchange an Auth0 JWT for a FaunaDB user secret.

ecwyne

Consider the following example. We have a sales class that has instances with the following shape.

{
  date: '2019-04-21',
  total: 1050,
  salesperson: Ref(Class('users'), '1234')
}

alishalisha

Checking the State of Your States

If applicable, make sure your design component accounts for all these states. This is basically copied from the Nine States of Design Medium article. 😛

• Initial state: What happens before your component does anything? Maybe it’s the first time a user sees it. Maybe it’s not activated yet. Essentially, the component exists but hasn’t started.
• Loading state: Have you accounted for when a user will be waiting for something to happen? What does that look like?
• Empty state: Your component has initialized, but it’s empty. No data. No Items. Now may be a good time to get the user to act (“Do this thing!”), or to reward them (“Good job, everything is taken care of”).
• One state: You have some data. On an input, this may be after the first keystroke. In a list, it might be when you have one item (or one left).
• Some data state: This is usually what you think

candycode

// Simulate a call to Dropbox or other service that can
// return an image as an ArrayBuffer.
var xhr = new XMLHttpRequest();

// Use JSFiddle logo as a sample image to avoid complicating
// this example with cross-domain issues.
xhr.open( "GET", "http://fiddle.jshell.net/img/logo.png", true );

// Ask for the result as an ArrayBuffer.
xhr.responseType = "arraybuffer";

ganwell

$> mkdir test

$> cd test/

$> git init
Initialized empty Git repository in /home/ganwell/Repositories/test/.git/

$> git checkout -b stable
Switched to a new branch 'stable'