I have an app which cannot use redirect_uri , so we tried to implement the “auth0.com/oauth/token” api to pass the username and password but it is responding with a access_denied/Unauthorized error , i tried all the combination and it only return the same error, please help us to tackle the issue, since we are migrating from legacy api and is there any api available which can be used for username-password authenticatio.
I’m pretty new to this so keep that in mind: Looks like you have a few things mixed together in that curl example.
/oauth/token is used to get an access token, not to authenticate a user.
If you want to get an access token as a normal user, you need to authenticate first (/authorize endpoint) to get your authorization code, and then use the authorization code to get your access token using the authorization code flow.
The client_credentials flow does not involve a username or password. Using client_credentials you are using the client ID and secret to directly (without logging in as a user) acquire an access token.
authenticate as a normal user, then call /oauth/token with your authorization code, or
use client creds to get an access token without logging in as a normal user