In the SPA + API architecture scenario ( Single-Page Applications (SPA) with API ), using a framework like VueJS or React against a REST API, I believe I understand that it is the responsibility of the SPA to authenticate the user against Auth0. In doing so, the SPA will receive back an Access Token (…

Hi Dave, First, if you have a SPA that has a single (or primary) REST API for a backend, my recommendation is that you treat this as a classic web app and use Auth Code Flow: [image] Authorization Code Flow Learn how the Authorization Code flow works and why you should use it for regula…

SPA + API responsibilities

Get Help

system Closed May 26, 2020, 9:12pm 6

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

CORS error with SPA + Rest API (Auth Code Flow)

Topic		Replies	Views
Validate Auth token before serving API Get Help	2	2527	April 8, 2021
How to secure an SPA which fetch data from REST api? Does every authentication needs to be done at backend? Get Help jwt , api , login	4	4651	March 9, 2021
LOCK and SPA, how does the server know if the access_token is valid ? Get Help lock	13	4018	March 2, 2018
Auth0 Configuration with UI-Less Service API and a separate UI app Get Help jwt , spa , api-authorization	2	3758	December 4, 2018
Validating SPA JWT Tokens in the backend Get Help management-api , clients	2	1358	November 14, 2022

SPA + API responsibilities

Related topics