auth0 Node.js SDK

To reduce bundle size (e.g., for Cloudflare Workers), import specific resource clients (like UsersClient or ClientsClient) from their own entry points instead of the full ManagementClient.

To avoid repeating authentication logic, use createManagementAuth from auth0/management. This utility handles token fetching and refreshing via client credentials and returns an options object that can be spread into any sub-client. The token is cached and shared across clients.

Best Practices for Small Bundles:

• Import clients as values from specific entry points (e.g., auth0/users).
• Import request/response types using import type { Management } from "auth0" to ensure they are erased at compile time.
• Reuse client instances rather than constructing them per request.

import { createManagementAuth } from "auth0/management";
import { ClientsClient } from "auth0/clients";
import { UsersClient } from "auth0/users";

// Configure auth once and reuse it across clients.
const auth = createManagementAuth({
    domain: "{YOUR_TENANT_AND_REGION}.auth0.com",
    clientId: "{YOUR_CLIENT_ID}",
    clientSecret: "{YOUR_CLIENT_SECRET}",
});

// Create each sub-client once and reuse the instances throughout your app.
export const clients = new ClientsClient(auth.clientOptions);
export const users = new UsersClient(auth.clientOptions);

await users.list({ page: 0, per_page: 10 });

In node-auth0 v5, several Management API methods have been moved under more specific sub-resource namespaces to better reflect the Auth0 API structure. When migrating from v4, you must update the method calls to use these new paths.

Email Management

• emails.get() $\rightarrow$ emails.provider.get()
• emails.update() $\rightarrow$ emails.provider.update()

User Grants

• grants.deleteByUserId() $\rightarrow$ userGrants.deleteByUserId()
• grants.delete() $\rightarrow$ userGrants.delete()

Signing Keys

• keys.rotate() $\rightarrow$ keys.signing.rotate()
• keys.get() $\rightarrow$ keys.signing.get()
• keys.revoke() $\rightarrow$ keys.signing.revoke()

User Identities and Security

• users.link() $\rightarrow$ users.identities.link()
• users.invalidateRememberBrowser() $\rightarrow$ users.multifactor.invalidateRememberBrowser()

Encryption Keys

• keys.createPublicWrappingKey() $\rightarrow$ keys.encryption.createPublicWrappingKey()

// Example of sub-resource move migration

// Before v5:
// await auth0.emails.get({ id: 'email_id' });
// await auth0.keys.rotate();

// After v5:
await auth0.emails.provider.get({ id: 'email_id' });
await auth0.keys.signing.rotate();

In v5, all iterable responses from *.list() methods return a Page object instead of a plain object with a data property. To retrieve all data, you must manually iterate through pages using page.hasNextPage() and page.getNextPage().

For offset-based pagination, you can pass page (0-indexed) and per_page in the options object. For checkpoint-based pagination (used by connections or organizations), use the take parameter.

import { ManagementClient } from "auth0";

const client = new ManagementClient({
    domain: "your-tenant.auth0.com",
    clientId: "YOUR_CLIENT_ID",
    clientSecret: "YOUR_CLIENT_SECRET",
});

// Manual pagination with default values
let page = await client.clients.list();
for (const client of page.data) {
    console.log(`Client ID: ${client.client_id}, Name: ${client.name}`);
}

while (page.hasNextPage()) {
    page = await page.getNextPage();
    for (const client of page.data) {
        console.log(`Client ID: ${client.client_id}, Name: ${client.name}`);
    }
}