Migrating to Auth0 API management

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "fortifyRemediation.softwareSecurityCenterURL": "https://ssc.uat.fortifyhosted.net"
+}

config/default.json

@@ -2,7 +2,7 @@
   "App": {
     "name": "IWA-API",
     "version": "1.0",
-    "description": "IWA-API - An insecure Node/Express REST API for use in Fortify demonstrations. For this sample, you can use the api key 'demo-access-token' to test the authorization filters.",
+    "description": "IWA-API - An insecure Node/Express REST API for use in Fortify demonstrations.",
     "port":  3000,
     "dbConfig": {
       "host": "127.0.0.1",
@@ -11,10 +11,9 @@
       "password": "iwa-dev",
       "database": "iwa-dev"
     },
-    "oktaConfig": {
-      "domain": "dev-67973733.okta.com",
-      "authServer": "default",
-      "audience": "api://default"
+    "auth0": {
+      "domain": "dev-ahui5f878pgtbrpr.us.auth0.com",
+      "audience": "https://iwa-api.onfortify.com"
     },
     "apiConfig": {
       "url": "http://localhost:3000",

config/production.json

@@ -8,7 +8,7 @@
       "database": "iwa"
     },
     "apiConfig": {
-      "url": "https://iwaapi.onfortify.com",
+      "url": "https://iwa-api.onfortify.com",
       "version": "v1",
       "description": "Production server"
     },

package.json

@@ -20,28 +20,35 @@
   "devDependencies": {
     "@tsconfig/node-lts": "^18.12.5",
     "@types/config": "^3.3.2",
+    "@types/cors": "^2.8.17",
     "@types/express": "^4.17.20",
+    "@types/express-jwt": "^7.4.2",
     "@types/helmet": "^4.0.0",
     "@types/jsonwebtoken": "^9.0.4",
     "@types/node": "^20.8.7",
     "ts-node-dev": "^2.0.0",
     "typescript": "^4.9.5"
   },
   "dependencies": {
-    "@okta/jwt-verifier": "^3.1.0",
     "@types/express-session": "^1.17.9",
     "@types/morgan": "^1.9.7",
     "@types/swagger-ui-express": "^4.1.5",
     "body-parser": "^1.20.2",
     "config": "^3.3.6",
+    "cors": "^2.8.5",
     "crypto-browserify": "^3.12.0",
     "express": "^4.18.2",
+    "express-async-errors": "^3.1.1",
+    "express-jwt": "^8.4.1",
+    "express-jwt-authz": "^2.4.1",
+    "express-oauth2-jwt-bearer": "^1.6.0",
     "express-session": "^1.17.3",
     "helmet": "^6.2.0",
     "jest": "^29.7.0",
     "jquery": "^3.6.0",
     "jsdom": "^17.0.0",
     "jsonwebtoken": "^8.5.1",
+    "jwks-rsa": "^3.1.0",
     "moment": "^2.29.2",
     "mongoose": "^5.9.7",
     "morgan": "^1.10.0",