Auth0 Social Connections — Google, GitHub, Facebook, and More

# google_connection.py
# Google social connection setup

def google_setup():
    print("Google Social Connection Setup:")
    print()
    print("Prerequisites (Google Cloud Console):")
    print("  1. Go to console.cloud.google.com")
    print("  2. Create a new project or select existing")
    print("  3. Enable Google+ API or People API")
    print("  4. Go to Credentials > Create Credentials > OAuth Client ID")
    print("  5. Set Application Type: Web Application")
    print("  6. Add Authorized Redirect URI from Auth0")
    print()
    print("In Auth0 Dashboard:")
    print("  1. Authentication > Social > Google")
    print("  2. Enter Client ID and Client Secret from Google")
    print("  3. Configure scopes (profile, email)")
    print("  4. Enable connection")
    print()
    print("Auth0 provides the redirect URI:")
    print("  https://YOUR_TENANT.us.auth0.com/login/callback")

google_setup()

# github_connection.py
# GitHub social connection setup

def github_setup():
    print("GitHub Social Connection Setup:")
    print()
    print("Prerequisites (GitHub Developer Settings):")
    print("  1. Go to Settings > Developer Settings > OAuth Apps")
    print("  2. Click 'New OAuth App'")
    print("  3. Set Homepage URL: https://YOUR_APP.com")
    print("  4. Set Authorization Callback URL from Auth0")
    print("  5. Register and copy Client ID and Secret")
    print()
    print("In Auth0 Dashboard:")
    print("  1. Authentication > Social > GitHub")
    print("  2. Enter Client ID and Client Secret")
    print("  3. Configure scopes (read:user, user:email)")
    print("  4. Enable connection")
    print()
    print("Note: GitHub requires users to authorize email access")
    print("if you need their email address.")

github_setup()

# scopes.py
# Social connection scopes

def scope_management():
    scopes = {
        "Google": ["profile", "email"],
        "GitHub": ["read:user", "user:email"],
        "Facebook": ["public_profile", "email"],
        "Apple": ["name", "email"],
        "Twitter": ["profile", "email"],
    }
    
    print("Default Scopes by Provider:")
    print()
    for provider, provider_scopes in scopes.items():
        print(f"  {provider:15s} {', '.join(provider_scopes)}")
    print()
    print("Best Practices:")
    print("  - Request only scopes you need")
    print("  - Email scope may require additional user consent")
    print("  - User profile data varies by provider")
    print("  - Apple requires minimal scopes by design")

scope_management()

# profile_linking.py
# Account linking and profile merging

def link_accounts():
    print("Account Linking Strategies:")
    print()
    print("1. Automatic linking (by email)")
    print("   - Auth0 can link accounts with the same email")
    print("   - Configurable in Tenant Settings")
    print()
    print("2. Manual linking (user-initiated)")
    print("   - User links social accounts from profile page")
    print("   - Uses Management API /users/{id}/identities")
    print()
    print("3. Post-login Action linking")
    print("   - Custom Action checks for existing email")
    print("   - Links accounts based on business logic")
    print()
    print("Important:")
    print("  - Primary account retains metadata")
    print("  - Secondary accounts link as identities")
    print("  - User can sign in with any linked account")

link_accounts()

def social_login_plan():
    print("Social Login Configuration Plan:")
    print()
    print("Connections to enable:")
    print("  1. Google: scopes=[profile, email] for general users")
    print("  2. GitHub: scopes=[read:user, user:email] for developers")
    print("  3. Apple: scopes=[name, email] for iOS users")
    print()
    print("Post-login Action:")
    print("  - Check if user email exists in database")
    print("  - If yes, link new identity to existing user")
    print("  - If no, create new user profile")
    print()
    print("UX considerations:")
    print("  - Show most-used providers first")
    print("  - Provide 'Continue with Email' fallback")
    print("  - Clear error messages for OAuth failures")

social_login_plan()