Skip to content

feat: pre-token and post-login hooks as HTTP callouts #419

Description

@Bccorb

Why

The Auth0 Actions equivalent, without running user code inside the auth server.

What

  • Call a configured HTTPS endpoint before token issue and after login
  • Can add claims or deny with a reason
  • Timeouts and a fail-open or fail-closed setting, audited

Done when

A hook can add a claim or block a sign-in, safely.

Activity

  1. added this to the v0.22 milestone on Oct 13, 2026
  2. added
    P2GovRAMP readiness track
    easyServes the easy-to-integrate promise
    v0.22Targets the v0.22 release
    on Oct 13, 2026
  3. added theissue type on Oct 13, 2026
  4. added
    v0.23Release v0.23: roles, permissions and hooks
    and removed
    v0.22Targets the v0.22 release
    on Nov 2, 2026
  5. added 2 commits that reference this issue on Nov 8, 2026
    48bafad
    1bbeeff
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    P2GovRAMP readiness trackeasyServes the easy-to-integrate promisev0.23Release v0.23: roles, permissions and hooks

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions