Auth0 API Rate Limits — Optimizing Auth0 API Usage Within Rate Limits

// Rate limit aware Management API client
class RateLimitedAuth0Client {
  constructor() {
    this.queue = [];
    this.processing = false;
    this.rateLimit = { remaining: 50, reset: Date.now() };
  }

  async enqueue(fn) {
    return new Promise((resolve, reject) => {
      this.queue.push({ fn, resolve, reject });
      this.processQueue();
    });
  }

  async processQueue() {
    if (this.processing) return;
    this.processing = true;

    while (this.queue.length > 0) {
      if (this.rateLimit.remaining <= 0) {
        const waitTime = this.rateLimit.reset - Date.now() + 1000;
        if (waitTime > 0) await delay(waitTime);
      }

      const { fn, resolve, reject } = this.queue.shift();
      try {
        const result = await fn();
        this.updateRateLimit(result.headers);
        resolve(result);
      } catch (err) {
        reject(err);
      }
    }

    this.processing = false;
  }

  updateRateLimit(headers) {
    this.rateLimit = {
      remaining: parseInt(headers['x-rate-limit-remaining'] || '0'),
      reset: parseInt(headers['x-rate-limit-reset'] || '0') * 1000
    };
  }
}

// Batch user operations
async function batchUpdateUsers(users) {
  const batchSize = 25;
  const client = new RateLimitedAuth0Client();

  for (let i = 0; i < users.length; i += batchSize) {
    const batch = users.slice(i, i + batchSize);
    await Promise.all(batch.map(user =>
      client.enqueue(() => auth0.users.update({ id: user.id }, { app_metadata: user.metadata }))
    ));
  }
}