auth0-oauth-client 0.2.0

A Django-focused Auth0 integration providing automated OIDC flows, account linking, and so on.

Auth0 OAuth Client

A Django-focused Auth0 integration providing automated OIDC flows, account linking, and connected account (My Account API). It's been created to support the Auth0 Token Vault feature, which requires Connected Accounts flow.

It's an opinionated library focused on the needs of our own products. Feel free to fork it and adapt it to your needs.

Rules

The sample_app demonstrates how to use the library. It implements the following rules:

• Only required scopes are requested for social connections.
• Additional scopes are requested during the connected account request flow (progressive consent).
• When the user creates a connected account, that connected account is eligible for automatic account linking.
  • Consider the following scenario:
    • If a user logs in with [e-mail] and adds [e-mail] as a connected account, logging in later with the Gmail address will link both, with [e-mail] remaining the primary account. No confirmation is required.
    • The same is true when the connected account matches the primary account.
• If a user signs up with an email/password, logs out, and later logs back in using a social connection with that same email, the accounts are automatically linked. The original email/password account is used as the primary account.
• If a user signs up via social, logs out, and later tries to log in with a password using the same email, they'll need to re-authenticate with the original social provider to link the accounts. The primary account is the social one.

Why did we build this?

Auth0 used to be the 'Stripe of Identity' sort of thing, known for its great developer experience. Lately, I’m not so sure. I almost gave up on it, but after finding some workarounds, I decided to build this library. I’m sharing it because seeing these issues go unaddressed hurts my software developer soul. 😬

Read the following Auth0 Community Questions for more details:

• Auth0 Fails to Store Refresh Tokens for Linked Accounts.
• I had built an integration using Token Vault, and it stopped. Understand why.

At the time of writing this README (2026-02-13), My Account API is not GA yet. It means this library might eventually break if Auth0 changes its API, again. 😐