//native
async function getManagementToken(auth: RT.Auth0): Promise<string> {
const response = await fetch(`https://${auth.domain}/oauth/token`, {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({
grant_type: "client_credentials",
client_id: auth.client_id,
client_secret: auth.client_secret,
audience: `https://${auth.domain}/api/v2/`,
}),
})
if (!response.ok) {
throw new Error(`${response.status} ${await response.text()}`)
}
const { access_token } = (await response.json()) as { access_token: string }
return access_token
}
/**
* Assign Permissions to Role
* Add permissions to a role. Each permission needs a resource_server_identifier (API audience) and a permission_name.
*/
export async function main(
auth: RT.Auth0,
role_id: string,
permissions: { resource_server_identifier: string; permission_name: string }[]
) {
const token = await getManagementToken(auth)
const url = new URL(
`https://${auth.domain}/api/v2/roles/${role_id}/permissions`
)
const response = await fetch(url, {
method: "POST",
headers: {
Authorization: `Bearer ${token}`,
"Content-Type": "application/json",
Accept: "application/json",
},
body: JSON.stringify({ permissions }),
})
if (!response.ok) {
throw new Error(`${response.status} ${await response.text()}`)
}
if (response.status === 204) return { success: true }
return await response.json()
}
Submitted by hugo989 5 days ago