Allowing users to create api keys

[tyf]

Hey there @truescope !

Apologize for the delayed response here, but wanted to get back to you on this one.

@truescope

Should i use the management api to create a new M2M application for each user that wants to use an api key? (effectively giving each user their own public/private keys to request tokens as they need to)

This is exactly the recommended approach:

Auth0 Support for API Keys and Personal Access Tokens

Problem statement: Does Auth0 support the concept of API keys or personal access tokens (think GitHub)? Answer: Auth0 does not provide a solution for personal access tokens. If this is something you are interested in, please upvote this feedback request. Regarding API keys: A client credentials grant is more or less equivalent to an API key - The primary difference being that API keys are typically validated by the API itself whereas client credentials are exchanged for a token at an authoriza…