Add support for roles and permissions

[pushpabrol]

Changes

• Added RolesManager for managing roles and the permissions within those roles
• Changed UserManager to add user specific roles and permission tasks
  -Changed management/index.js

References

Testing

Add test/management/roles.tests.js and modified test/management/users.tests.js

• This change adds unit test coverage

• This change adds integration test coverage

Checklist

• I have read the Auth0 general contribution guidelines

• I have read the Auth0 Code of Conduct

• All existing and new tests complete without errors

All new tests complete without errors but some old tests seem to be erroring out

[luisrudge]

@pushpabrol can you check the missing test coverage? thanks for the pr 🎉

[jfbaraky]

That's also possible to add permissions on Auth0 APIs?
Like:
https://auth0.com/docs/api/management/guides/apis/update-permissions-apis (create page is broken)

[luisrudge]

like this?
https://auth0.com/docs/api/management/v2#!/Roles/post_role_permission_assignment
http://auth0.github.io/node-auth0/module-management.ManagementClient.html#addPermissionsInRole

[jfbaraky]

@luisrudge not in the role. I need to add the permission in a custom API.

Add the permission to the role was enough to use the application and give the right permissions to the users, but on Postman tests, when I get the token, I can only get permissions defined on API, since is a machine-to-machine flow.

Today I can do using this way, but it's very time consuming and hard to maintain between the different environments.

[jfbaraky]

@luisrudge, I've founded how to do it: update the resource server defining the scopes. You don't need to create the permission, just update the server adding it to the array of scopes. Also, it's hard to find the answers when the frontend and backend don't have the same names for the same things :(

http://auth0.github.io/node-auth0/module-management.ManagementClient.html#updateResourceServer

[luisrudge]

I agree with you that it's confusing that the frontend calls resource servers as APIs :( but I'm glad you found it!