Auth & Identity
Auth0 Webhooks
Identity platform by Okta. Receive events for logins, signups, password changes, and security alerts via Log Streams.
Connecting Auth0 to Hookbase
Create a source in Hookbase first — it gives you an ingest URL to paste into Auth0. Then:
- 1Go to Auth0 Dashboard → Monitoring → Streams
- 2Click "Create Stream", select "Custom Webhook" and name it
- 3Paste your Hookbase ingest URL into Payload URL
- 4Paste the Authorization Token Hookbase generated into the Authorization Token field (no "Bearer " prefix)
- 5Set Content Type to application/json and Content Format to "JSON Object" (one log event per request) or "JSON Array". Don't leave it on the default "JSON Lines": that body isn't valid JSON, so Hookbase can't read the event type or id
- 6Select the event categories to stream and save
Signature verification
Set the source's provider to auth0 and paste the signing secret. Every request is checked before the event is stored, and anything that fails is rejected rather than quietly recorded.
- Algorithm
- Shared secret echoed verbatim in a header (not HMAC-signed)
- Header
- Authorization
- Where to find the secret
- Auth0 Dashboard → Monitoring → Streams → Create Stream → Custom Webhook → Authorization Token. Paste the token Hookbase generated, exactly as shown. Auth0 sends it verbatim in the Authorization header and adds no "Bearer " prefix.
Auth0 event types
8 of the events people route most often. Hookbase accepts every event Auth0 sends, whether or not it is listed here.
ss
Successful login
f
Failed login
sapi
API operation success
fapi
API operation failure
sce
Successful email change
scp
Successful password change
fcoa
Failed cross-origin authentication
limit_wc
Blocked IP address
What a Auth0 webhook looks like
A ss payload. Hookbase stores the raw body exactly as it arrived, so this is also what you get back on a replay.
{
"log_id": "90020240115103000123456",
"data": {
"date": "2024-01-15T10:30:00.000Z",
"type": "ss",
"description": "Successful login",
"connection": "Username-Password-Authentication",
"client_id": "abc123def456",
"client_name": "My SPA",
"ip": "203.0.113.42",
"user_agent": "Mozilla/5.0...",
"user_id": "auth0|507f1f77bcf86cd799439011",
"user_name": "jane@example.com"
}
}Start receiving Auth0 webhooks
Create a source, paste the URL into Auth0, and watch the first event arrive. The free tier includes 1,000 events a month.
Get Started Free