Auth0 Setup Guide

Configuring Auth0 for CatalyX

1. CatalyX API (Resource Server)

Navigate to Applications → APIs → Create API and configure:

• Name: CatalyX

• Identifier (Audience): <audience>

2. UI Client

Create a new application with type Single Page Application and configure:

• Grant types: Authorization Code, Refresh Token

• Allowed Callback URLs: <UI url>, <UI url>/domains, <UI url>/participants

• Allowed Logout URLs: same three URLs as above

The UI client requests the <audience> on login.

3. API Client

Create a new application with type Regular Web Application and configure:

• Grant types: Client Credentials, Authorization Code, Refresh Token

4. Connect Both Clients to the CatalyX API

Go to APIs → CatalyX → Machine to Machine Applications, enable both the UI and API clients, and grant their respective scopes.

Client	Application Type	Grant Types	Has Client Secret
UI	Single Page Application	Authorization Code; Refresh Token	No
API	Regular Web Application	Client Credentials; Authorization Code; Refresh Token	Yes

Example Helm Value Overrides

helm-values.yaml

api:
  extraEnv:
    AUTH_ROLES: "false"
    AUTH_AUDIENCE: "<audience>" # Comes from identifier of Auth0 API

ui:
  extraEnv:
    AUTH_ROLES: "false"
    AUTH_AUDIENCE: "<audience>" # Comes from identifier of Auth0 API

auth:
  enabled: true
  keycloak:
    enabled: false
  url: "https://dev-2bsf8p5hbjadzwh4.us.auth0.com/" # Example URL
  client:
    idApiOperator: "<API Client ID>"
    idUI: "<UI client ID>"
    secret: "<API secret>"

Configuring Auth0 for Validator

To configure Auth0 resources for a validator, follow the Kubernetes Validator Deployment guide. Resources should be created under the CatalyX API.

Callback URLs and Logout URLs can be added after CatalyX deploys Wallet and CNS resources and generates the URLs.