⚠️

重要前提

安装AI Skills的关键前提是：必须科学上网，且开启TUN模式，这一点至关重要，直接决定安装能否顺利完成，在此郑重提醒三遍：科学上网，科学上网，科学上网。查看完整安装教程 →

Auth0 Fastify 集成指南：为 Fastify Web 应用快速添加身份验证

auth0-fastify by auth0/agent-skills

67 周安装量

13 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/auth0/agent-skills --skill auth0-fastify

Node.js Web应用安全

🇨🇳中文介绍

Auth0 Fastify 集成

使用 @auth0/auth0-fastify 为 Fastify Web 应用程序添加身份验证。

先决条件

Fastify 应用程序 (v5.x 或更高版本)
Node.js 20 LTS 或更高版本
已配置的 Auth0 账户和应用程序
如果尚未设置 Auth0，请先使用 auth0-quickstart 技能

不适用场景

单页应用程序 - 对于客户端身份验证，请使用 auth0-react、auth0-vue 或 auth0-angular
Next.js 应用程序 - 使用 auth0-nextjs 技能，它同时处理客户端和服务器端
移动应用程序 - 对于 React Native/Expo，请使用 auth0-react-native
无状态 API - 对于无需会话的 JWT 验证，请改用

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

相关 Skills

Azure RBAC 权限管理工具：查找最小角色、创建自定义角色与自动化分配

148,200 周安装

OpenClaw 安全 Linux 云部署指南：私有优先、SSH隧道、Podman容器化

48,800 周安装

Linux云主机安全托管指南：从SSH加固到HTTPS部署

48,600 周安装

xdrop 文件传输脚本：Bun 环境下安全上传下载工具，支持加密分享

45,900 周安装

import 'dotenv/config';
import Fastify from 'fastify';
import fastifyAuth0 from '@auth0/auth0-fastify';
import fastifyView from '@fastify/view';
import ejs from 'ejs';

const fastify = Fastify({ logger: true });

// 注册视图引擎
await fastify.register(fastifyView, {
  engine: { ejs },
  root: './views',
});

// 配置 Auth0 插件
await fastify.register(fastifyAuth0, {
  domain: process.env.AUTH0_DOMAIN,
  clientId: process.env.AUTH0_CLIENT_ID,
  clientSecret: process.env.AUTH0_CLIENT_SECRET,
  appBaseUrl: process.env.APP_BASE_URL,
  sessionSecret: process.env.SESSION_SECRET,
});

fastify.listen({ port: 3000 });

// 公开路由
fastify.get('/', async (request, reply) => {
  const session = await fastify.auth0Client.getSession({ request, reply });
  return reply.view('views/home.ejs', {
    isAuthenticated: !!session,
  });
});

// 受保护的路由
fastify.get('/profile', {
  preHandler: async (request, reply) => {
    const session = await fastify.auth0Client.getSession({ request, reply });
    if (!session) {
      return reply.redirect('/auth/login');
    }
  }
}, async (request, reply) => {
  const user = await fastify.auth0Client.getUser({ request, reply });
  return reply.view('views/profile.ejs', { user });
});

错误	修复方法
忘记在 Auth0 仪表板中添加回调 URL	将 `/auth/callback` 路径添加到允许的回调 URL 中（例如，`http://localhost:3000/auth/callback`）
缺少或强度不足的 SESSION_SECRET	使用 `openssl rand -hex 64` 生成安全的 64 字符密钥并存储在 .env 文件中
在 Auth0 中创建为 SPA 类型应用程序	对于服务器端身份验证，必须是常规 Web 应用程序类型
会话密钥在代码中暴露	始终使用环境变量，切勿硬编码密钥
生产环境使用了错误的 appBaseUrl	将 APP_BASE_URL 更新为匹配你的生产域名
没有 await fastify.register	Fastify v4+ 要求 await 插件注册

domain - Auth0 租户域名（必需）
clientId - Auth0 客户端 ID（必需）
clientSecret - Auth0 客户端密钥（必需）
appBaseUrl - 应用程序 URL（必需）
sessionSecret - 会话加密密钥（必需，最少 64 字符）
audience - API 受众（可选，用于调用 API）

fastify.auth0Client.getSession({ request, reply }) - 获取用户会话
fastify.auth0Client.getUser({ request, reply }) - 获取用户资料
fastify.auth0Client.getAccessToken({ request, reply }) - 获取访问令牌
fastify.auth0Client.logout(options, { request, reply }) - 登出用户

🇺🇸English

Auth0 Fastify Integration

Add authentication to Fastify web applications using @auth0/auth0-fastify.

Prerequisites

Fastify application (v5.x or newer)
Node.js 20 LTS or newer
Auth0 account and application configured
If you don't have Auth0 set up yet, use the auth0-quickstart skill first

When NOT to Use

Single Page Applications - Use auth0-react, auth0-vue, or auth0-angular for client-side auth
Next.js applications - Use auth0-nextjs skill which handles both client and server
Mobile applications - Use auth0-react-native for React Native/Expo
Stateless APIs - Use @auth0/auth0-fastify-api instead for JWT validation without sessions
Microservices - Use JWT validation for service-to-service auth

Quick Start Workflow

1. Install SDK

npm install @auth0/auth0-fastify fastify @fastify/view ejs dotenv

2. Configure Environment

Create .env:

AUTH0_DOMAIN=your-tenant.auth0.com
AUTH0_CLIENT_ID=your-client-id
AUTH0_CLIENT_SECRET=your-client-secret
SESSION_SECRET=<openssl-rand-hex-64>
APP_BASE_URL=http://localhost:3000

Generate secret: openssl rand -hex 64

3. Configure Auth Plugin

Create your Fastify server (server.js):

import 'dotenv/config';
import Fastify from 'fastify';
import fastifyAuth0 from '@auth0/auth0-fastify';
import fastifyView from '@fastify/view';
import ejs from 'ejs';

const fastify = Fastify({ logger: true });

// Register view engine
await fastify.register(fastifyView, {
  engine: { ejs },
  root: './views',
});

// Configure Auth0 plugin
await fastify.register(fastifyAuth0, {
  domain: process.env.AUTH0_DOMAIN,
  clientId: process.env.AUTH0_CLIENT_ID,
  clientSecret: process.env.AUTH0_CLIENT_SECRET,
  appBaseUrl: process.env.APP_BASE_URL,
  sessionSecret: process.env.SESSION_SECRET,
});

fastify.listen({ port: 3000 });

This automatically creates:

/auth/login - Login endpoint
/auth/logout - Logout endpoint
/auth/callback - OAuth callback

4. Add Routes

// Public route
fastify.get('/', async (request, reply) => {
  const session = await fastify.auth0Client.getSession({ request, reply });
  return reply.view('views/home.ejs', {
    isAuthenticated: !!session,
  });
});

// Protected route
fastify.get('/profile', {
  preHandler: async (request, reply) => {
    const session = await fastify.auth0Client.getSession({ request, reply });
    if (!session) {
      return reply.redirect('/auth/login');
    }
  }
}, async (request, reply) => {
  const user = await fastify.auth0Client.getUser({ request, reply });
  return reply.view('views/profile.ejs', { user });
});

5. Test Authentication

Start your server:

node server.js

Visit http://localhost:3000 and test the login flow.

Common Mistakes

Mistake	Fix
Forgot to add callback URL in Auth0 Dashboard	Add `/auth/callback` path to Allowed Callback URLs (e.g., `http://localhost:3000/auth/callback`)
Missing or weak SESSION_SECRET	Generate secure 64-char secret with `openssl rand -hex 64` and store in .env
App created as SPA type in Auth0	Must be Regular Web Application type for server-side auth
Session secret exposed in code	Always use environment variables, never hardcode secrets
Wrong appBaseUrl for production	Update APP_BASE_URL to match your production domain
Not awaiting fastify.register	Fastify v4+ requires awaiting plugin registration

Related Skills

auth0-quickstart - Basic Auth0 setup
auth0-migration - Migrate from another auth provider
auth0-mfa - Add Multi-Factor Authentication

Quick Reference

Plugin Options:

domain - Auth0 tenant domain (required)
clientId - Auth0 client ID (required)
clientSecret - Auth0 client secret (required)
appBaseUrl - Application URL (required)
sessionSecret - Session encryption secret (required, min 64 chars)
audience - API audience (optional, for calling APIs)

Client Methods:

fastify.auth0Client.getSession({ request, reply }) - Get user session
fastify.auth0Client.getUser({ request, reply }) - Get user profile
fastify.auth0Client.getAccessToken({ request, reply }) - Get access token
fastify.auth0Client.logout(options, { request, reply }) - Logout user

Common Use Cases:

Protected routes → Use preHandler to check session (see Step 4)
Check auth status → !!session
Get user info → getUser({ request, reply })
Call APIs → getAccessToken({ request, reply })

References

Weekly Installs

Repository

auth0/agent-skills

GitHub Stars

First Seen

Feb 27, 2026

Security Audits

Gen Agent Trust HubPass SocketPass SnykPass

Installed on

cursor66

gemini-cli66

github-copilot66

amp66

codex66

kimi-cli66

Auth0 Fastify 集成指南：为 Fastify Web 应用快速添加身份验证

🇨🇳中文介绍

Auth0 Fastify 集成

先决条件

不适用场景

相关 Skills

快速开始工作流

1. 安装 SDK

2. 配置环境

3. 配置 Auth 插件

4. 添加路由

5. 测试身份验证

常见错误

相关技能

快速参考

参考