Skip to content

Commit d7d18dc

Browse files
committed
secure docs
1 parent 3acd998 commit d7d18dc

File tree

187 files changed

+125
-1403
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

187 files changed

+125
-1403
lines changed

main/docs/secure/application-credentials.mdx

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,7 @@
11
---
2-
description: Describes ways you can authenticate your application with Auth0
3-
services.
4-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
5-
'og:title': Application Credentials
6-
'og:url': https://auth0.com/docs/
7-
permalink: application-credentials
2+
description: Describes ways you can authenticate your application with Auth0 services.
83
sidebarTitle: Overview
94
title: Application Credentials
10-
'twitter:description': Describes ways you can authenticate your application with Auth0
11-
services.
12-
'twitter:title': Application Credentials
135
---
146
Confidential applications, unlike public applications, can securely store credentials. When confidential applications request access or <Tooltip tip="ID Token: Credential meant for the client itself, rather than for accessing a resource." cta="View Glossary" href="/docs/glossary?term=ID+tokens">ID tokens</Tooltip> from the [token endpoint](https://auth0.com/docs/api/authentication#get-token), the application must authenticate with the <Tooltip tip="ID Token: Credential meant for the client itself, rather than for accessing a resource." cta="View Glossary" href="/docs/glossary?term=authorization+server">authorization server</Tooltip>. During this request for tokens, the application provides credentials known by the application. Additionally, application credentials can also provide authenticity and integrity protection for request parameters sent to the [`/authorize`](https://auth0.com/docs/api/authentication#authorize-application) endpoint.
157

@@ -138,4 +130,4 @@ You can update an application’s authentication method in the Auth0 Dashboard.
138130
* [Authenticate with Private Key JWT](/docs/get-started/authentication-and-authorization-flow/authenticate-with-private-key-jwt)
139131
* [Rotate Credentials](/docs/get-started/applications/rotate-credentials)
140132
* [Configure Private Key JWT Authentication](/docs/get-started/applications/configure-private-key-jwt)
141-
* [Authenticate with mTLS](/docs/get-started/authentication-and-authorization-flow/authenticate-with-mtls)
133+
* [Authenticate with mTLS](/docs/get-started/authentication-and-authorization-flow/authenticate-with-mtls)

main/docs/secure/application-credentials/generate-rsa-key-pair.mdx

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,6 @@
11
---
22
description: Learn how to generate a RSA key pair.
3-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
4-
'og:title': Generate RSA Key Pair
5-
'og:url': https://auth0.com/docs/
6-
permalink: generate-rsa-key-pair
73
title: Generate RSA Key Pair
8-
'twitter:description': Learn how to generate a RSA key pair.
9-
'twitter:title': Generate RSA Key Pair
104
---
115
<Warning>
126

main/docs/secure/attack-protection.mdx

Lines changed: 2 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,7 @@
11
---
2-
description: Describes how Auth0 detects attacks to stop malicious attempts to
3-
access your application, alert you and your users of suspicious activity, and block
4-
further login attempts.
5-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
6-
'og:title': Attack Protection
7-
'og:url': https://auth0.com/docs/
8-
permalink: attack-protection
2+
description: Describes how Auth0 detects attacks to stop malicious attempts to access your application, alert you and your users of suspicious activity, and block further login attempts.
93
sidebarTitle: Overview
104
title: Attack Protection
11-
'twitter:description': Describes how Auth0 detects attacks to stop malicious attempts
12-
to access your application, alert you and your users of suspicious activity, and
13-
block further login attempts.
14-
'twitter:title': Attack Protection
155
---
166
Auth0 can detect attacks and stop malicious attempts to access your application such as blocking traffic from certain IPs and displaying CAPTCHA.
177

@@ -85,4 +75,4 @@ You can also create reports using tenant log data to [see attack protection even
8575
* [Suspicious IP Throttling](/docs/secure/attack-protection/suspicious-ip-throttling)
8676
* [Brute-Force Protection](/docs/secure/attack-protection/brute-force-protection)
8777
* [Breached Password Detection](/docs/secure/attack-protection/breached-password-detection)
88-
* [View Attack Protection Log Events](/docs/secure/attack-protection/view-attack-protection-events)
78+
* [View Attack Protection Log Events](/docs/secure/attack-protection/view-attack-protection-events)

main/docs/secure/attack-protection/bot-detection.mdx

Lines changed: 1 addition & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,7 @@
11
---
2-
description: Describes how Auth0 detects attacks to protect against malicious
3-
attempts to access your application, alert you and your users of suspicious activity,
4-
and block further login attempts.
5-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
6-
'og:title': Bot Detection
7-
'og:url': https://auth0.com/docs/
8-
permalink: bot-detection
2+
description: Describes how Auth0 detects attacks to protect against malicious attempts to access your application, alert you and your users of suspicious activity, and block further login attempts.
93
sidebarTitle: Overview
104
title: Bot Detection
11-
'twitter:description': Describes how Auth0 detects attacks to protect against malicious
12-
attempts to access your application, alert you and your users of suspicious activity,
13-
and block further login attempts.
14-
'twitter:title': Bot Detection
155
---
166
<Card title="Before you start">
177

main/docs/secure/attack-protection/bot-detection/bot-detection-custom-login-pages.mdx

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,8 @@
11
---
22
description: Learn how to enable and configure bot detection when using custom
33
login pages built with the auth0.js library.
4-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
5-
'og:title': Add Bot Detection to Custom Login Pages
6-
'og:url': https://auth0.com/docs/
7-
permalink: bot-detection-custom-login-pages
84
title: Add Bot Detection to Custom Login Pages
9-
'twitter:description': Learn how to enable and configure bot detection when using
105
custom login pages built with the auth0.js library.
11-
'twitter:title': Add Bot Detection to Custom Login Pages
126
---
137
If you build a custom login page using the auth0.js library, you can enable <Tooltip tip="Bot Detection: Form of attack protection in which Auth0 blocks suspected bot traffic by enabling a CAPTCHA during the login process." cta="View Glossary" href="/docs/glossary?term=Bot+Detection">Bot Detection</Tooltip> to render a CAPTCHA step in scenarios when a request is determined to be high risk by Auth0.
148

main/docs/secure/attack-protection/bot-detection/bot-detection-native-apps.mdx

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,8 @@
11
---
22
description: Learn how to add bot protection and detection to your native application
33
that use Auth0.Swift, Auth0.Android, Lock.Swift, and Lock.Android.
4-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
5-
'og:title': Add Bot Detection to Native Applications
6-
'og:url': https://auth0.com/docs/
7-
permalink: bot-detection-native-apps
84
title: Add Bot Detection to Native Applications
9-
'twitter:description': Learn how to add bot protection and detection to your native
105
application that use Auth0.Swift, Auth0.Android, Lock.Swift, and Lock.Android.
11-
'twitter:title': Add Bot Detection to Native Applications
126
---
137
You can add [Bot Detection](/docs/secure/attack-protection/bot-detection) to your native applications with little to no additional configuration depending on the SDK and authentication flow you are using.
148

main/docs/secure/attack-protection/bot-detection/bot-detection-passwordless-flows.mdx

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,8 @@
11
---
22
description: Learn how to enable and configure bot detection for passwordless
33
flows in Auth0.
4-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
5-
'og:title': Add Bot Detection to Passwordless Flows
6-
'og:url': https://auth0.com/docs/
7-
permalink: bot-detection-passwordless-flows
84
title: Add Bot Detection to Passwordless Flows
9-
'twitter:description': Learn how to enable and configure bot detection for passwordless
105
flows in Auth0.
11-
'twitter:title': Add Bot Detection to Passwordless Flows
126
---
137
If you use <Tooltip tip="Passwordless: Form of authentication that does not rely on a password as the first factor." cta="View Glossary" href="/docs/glossary?term=passwordless">passwordless</Tooltip> login and signup flows, you can enable <Tooltip tip="Passwordless: Form of authentication that does not rely on a password as the first factor." cta="View Glossary" href="/docs/glossary?term=Bot+Detection">Bot Detection</Tooltip> to render a CAPTCHA step in scenarios when a request is determined to be high-risk by Auth0.
148

main/docs/secure/attack-protection/bot-detection/configure-captcha.mdx

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,8 @@
11
---
22
description: Learn how to configure third-party CAPTCHA provider integrations
33
with Auth0 Bot Detection.
4-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
5-
'og:title': Configure Third-Party CAPTCHA Provider Integrations
6-
'og:url': https://auth0.com/docs/
7-
permalink: configure-captcha
84
title: Configure Third-Party CAPTCHA Provider Integrations
9-
'twitter:description': Learn how to configure third-party CAPTCHA provider integrations
105
with Auth0 Bot Detection.
11-
'twitter:title': Configure Third-Party CAPTCHA Provider Integrations
126
---
137
Auth0 supports several third-party CAPTCHA provider integrations for [Bot Detection](/docs/secure/attack-protection/bot-detection).
148

main/docs/secure/attack-protection/breached-password-detection.mdx

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,6 @@
11
---
2-
description: Understand why a user receives a breached password email and general
3-
web security tips.
4-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
5-
'og:title': Breached Password Detection
6-
'og:url': https://auth0.com/docs/
7-
permalink: breached-password-detection
2+
description: Understand why a user receives a breached password email and general web security tips.
83
title: Breached Password Detection
9-
'twitter:description': Understand why a user receives a breached password email and
10-
general web security tips.
11-
'twitter:title': Breached Password Detection
124
---
135
<Warning>
146

@@ -185,4 +177,4 @@ Verify a user's password reset experience when Auth0 detects a breached password
185177
* [Brute-Force Protection](/docs/secure/attack-protection/brute-force-protection)
186178
* [Suspicious IP Throttling](/docs/secure/attack-protection/suspicious-ip-throttling)
187179
* [View Attack Protection Log Events](/docs/secure/attack-protection/view-attack-protection-events)
188-
* [Customize Blocked Account Emails](/docs/customize/email/customize-blocked-account-emails)
180+
* [Customize Blocked Account Emails](/docs/customize/email/customize-blocked-account-emails)

main/docs/secure/attack-protection/brute-force-protection.mdx

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,6 @@
11
---
2-
description: Learn how to brute-force protection works in Auth0 and how to configure
3-
responses.
4-
'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
5-
'og:title': Brute-Force Protection
6-
'og:url': https://auth0.com/docs/
7-
permalink: brute-force-protection
2+
description: Learn how to brute-force protection works in Auth0 and how to configure responses.
83
title: Brute-Force Protection
9-
'twitter:description': Learn how to brute-force protection works in Auth0 and how
10-
to configure responses.
11-
'twitter:title': Brute-Force Protection
124
---
135
<Tooltip tip="Brute-force Protection: Form of attack protection that safeguards against brute-force attacks that occur from a single IP address and target a single user account." cta="View Glossary" href="/docs/glossary?term=Brute-force+protection">Brute-force protection</Tooltip> safeguards your tenant against attackers who use a single IP address to target a single user account. By default, Brute-force protection is enabled when you create an Auth0 tenant.
146

@@ -111,4 +103,4 @@ Use the **IP AllowList** feature to exempt a specific IP address or CIDR range f
111103
* [Activate and Configure Attributes for Flexible Identifiers](/docs/authenticate/database-connections/activate-and-configure-attributes-for-flexible-identifiers)
112104
* [Customize Blocked Account Emails](/docs/customize/email/customize-blocked-account-emails)
113105
* [View Attack Protection Log Events](/docs/secure/attack-protection/view-attack-protection-events)
114-
* [User/Password Authentication Rate Limits](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/database-connections-rate-limits)
106+
* [User/Password Authentication Rate Limits](/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/database-connections-rate-limits)

0 commit comments

Comments
 (0)