In the SPA + API architecture scenario ( Single-Page Applications (SPA) with API ), using a framework like VueJS or React against a REST API, I believe I understand that it is the responsibility of the SPA to authenticate the user against Auth0. In doing so, the SPA will receive back an Access Token (…

Hi Dave, First, if you have a SPA that has a single (or primary) REST API for a backend, my recommendation is that you treat this as a classic web app and use Auth Code Flow: [image] Authorization Code Flow Learn how the Authorization Code flow works and why you should use it for regula…

SPA + API responsibilities

Get Help

system Closed May 26, 2020, 9:12pm 6

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

CORS error with SPA + Rest API (Auth Code Flow)

Topic		Replies	Views
LOCK and SPA, how does the server know if the access_token is valid ? Get Help lock	13	4019	March 2, 2018
Validate Auth token before serving API Get Help	2	2529	April 8, 2021
How to secure an SPA which fetch data from REST api? Does every authentication needs to be done at backend? Get Help jwt , api , login	4	4667	March 9, 2021
Auth0 Configuration with UI-Less Service API and a separate UI app Get Help jwt , spa , api-authorization	2	3759	December 4, 2018
Vue SPA / Python API Get Help auth0	2	3379	November 27, 2019

SPA + API responsibilities

Related topics