🔀 Migrate Auth0 rules to actions before EOL on 18/11/24

[michaeljcollinsuk]

User Story

As a AP maintainer
I need to migrate Auth0 rules to actions
Before the end of life date on 18/11/24

Value / Purpose

This is required is we intend to continue using Auth0 for authentication in the AP after November 2024.

Useful Contacts

No response

User Types

No response

Hypothesis

No response

Proposal

We use Auth0 rules as part of our authentication process for the AP. Auth0 rules, and are reaching their end of life on November 18th 2024.

Therefore if we still plan to be using Auth0 after this date, we need to migrate from using rules to actions.

As it stands, it seems the auth0 rules have been defined "click ops" within the Auth0 UI. As part of the migration, we can investigate other ways to deploy the new Actions if we have time before the EOL date.

Additional Information

https://auth0.com/docs/customize/actions/migrate/migrate-from-rules-to-actions?mkt_tok=ODU1LVFBSC02OTkAAAGRQyx1v8lRLPb2HiE0qTgTUD4ABjlQmlU2kA67L5jgqFKVlGwC1PtQE0cB20LuopBIQgKEd45mqFBUZgB5o2awcMXCqrL8P0qoBBdlh7YvonmO4xO_

Definition of Done

• Migrate Auth0 rules to actions
• Documentation related to Auth0 rules updated

[github-actions]

This issue is being marked as stale because it has been open for 60 days with no activity. Remove stale label or comment to keep the issue open.

[github-actions]

This issue is being closed because it has been open for a further 7 days with no activity. If this is still a valid issue, please reopen it, Thank you!

[github-actions]

This issue is being marked as stale because it has been open for 60 days with no activity. Remove stale label or comment to keep the issue open.

[julialawrence]

We're either gonna migrate out of this tenant or go to EntraID directly.

[julialawrence]

We're either gonna migrate out of this tenant or go to EntraID directly.

[jamesstottmoj]

Rules have been migrated to actions in the dev tenant. I have tested this in Dev. Logging into control panel is successful but launching tools results in a 502 error. This seems to be a result of JWT decoding set to RS256. By going to the application on Auth0 dashboard and changing the decoding to use HS256, the tools can be accessed. I'm unsure if this is the correct route but the proxy suggests that this should be fine.

[jamesstottmoj]

Currently converting actions in prod tenant.

[jamesstottmoj]

Rules converted to actions in prod tenant. Will migrate over to actions mid-week

[jamesstottmoj]

Updated terraform to change JWT authentication algorithms for tooling in dev. Need to either get an application in the dev environment or switch prod over after hours to test applications.

[jamesstottmoj]

PR has been put up for dev tooling JWT switch