# Angular C# API Backend **URL:** \ **Category:** Get Help\ **Tags:** clients, management-api\ **Created:** [October 21, 2023, 2:10pm UTC](https://community.auth0.com/t/angular-c-api-backend/119068 "2023-10-21T14:10:43Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![profitdreamer](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/profitdreamer/32/51854_2.png) [@profitdreamer](https://community.auth0.com/u/profitdreamer)\ **Post date:** [October 21, 2023, 2:10pm UTC](https://community.auth0.com/t/angular-c-api-backend/119068/1 "2023-10-21T14:10:43Z")
I am confused. I have an angular app I can get that work. Now I need to go to a C# .NET CORE API. I set up a SINGLE PAGE APPLICATION for my Angular application… Then I set up under API a CUSTOM API. This is all I have done. DO I USE THE Domain, Client ID, and Client Secret from MY SPA in my C# app OR Do I need to to create another APPLICATION for my C# application that is machine to machine.? When I try to get a TOKEN using the credential from my SPA in postman it does not work. I think I am confused here on how all of this works. I get this error “error”: “unauthorized\_client”, “error\_description”: “Grant type ‘client\_credentials’ not allowed for the client.”, Is my confusion that I can’t use the SPA credentials for my C# application? - Update Ok, I think part of my confusion is IGNORANCE, and the documentation is sort of suspect 1. The confusion (I hope) is that I need to create 2 Applications (is that correct?). I created one for my SPA and then one for C# Backend. For some reason I got it in my mind that I only needed the SPA application and it would somehow pass down my BEARER token. Was that the WRONG ASSUMPTION? 2. I then created a NEW Application/API (menu structure) and ALSO created an Applications/Applications (how does that menu structure make sense?) MACHINE TO MACHINE application for my C# backend (IS THAT THE CORRECT THING TO DO?)… With this set up, I was able to get a bearer token and it did allow me to get to my C# API (I used postman and passed in the BEARER token in the headers and it worked) 3. NOW HERE IS MY CONFUSION \*\*\*. How do I now make my angular application pass down this token? I need to find the IN-DEPTH ARTICLE FOR THAT… I realize I need to read the documentation, that was probably my fault, but it was really confusing and I was looking for an article that shows me how to do this WHOLE WORKFLOW… I am sure it is there, my fault for not understanding, but it was confusing… I will read more and figure it out and update this post, I AM NOT THE ONLY PERSON who will MIS-READ the documentation ---
**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\ **Post date:** [October 26, 2023, 7:45pm UTC](https://community.auth0.com/t/angular-c-api-backend/119068/3 "2023-10-26T19:45:51Z")
Hi @profitdreamer, Welcome to the Auth0 Community! > [@profitdreamer](#): > > The confusion (I hope) is that I need to create 2 Applications (is that correct?). I created one for my SPA and then one for C# Backend. For some reason I got it in my mind that I only needed the SPA application and it would somehow pass down my BEARER token. Was that the WRONG ASSUMPTION? That is correct, you only need to register the SPA as an application, and the backend as an API. > [@profitdreamer](#): > > I then created a NEW Application/API (menu structure) and ALSO created an Applications/Applications (how does that menu structure make sense?) MACHINE TO MACHINE application for my C# backend (IS THAT THE CORRECT THING TO DO?)… With this set up, I was able to get a bearer token and it did allow me to get to my C# API (I used postman and passed in the BEARER token in the headers and it worked) You don’t need a machine to machine app for your SPA → API requests. These can be authenticated with the Access Token passed in header (bearer token). Here’s an example of a full stack Angular + C# app: > **[Angular with Standard Components (TypeScript) + ASP.NET Core (C#) Code...](https://developer.auth0.com/resources/code-samples/full-stack/hello-world/basic-access-control/spa/angular-typescript/aspnet-core-csharp)** > > See full-stack authentication and authorization in action using Auth0, Angular (TypeScript) using Angular class components, and ASP.NET Core (C#). This Auth0 "Hello World" code sample demonstrates basic access control in a full-stack system. ---
**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\ **Post date:** [November 9, 2023, 7:46pm UTC](https://community.auth0.com/t/angular-c-api-backend/119068/4 "2023-11-09T19:46:47Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.