ASP.Net Web API Tutorial

Get Help
, ,
2

There are a couple of things you need to do:

  1. Correct, for a SPA, you would use the Implicit Grant flow.
  2. You need to configure the API in Auth0. This is the Auth0 mapping to your API, similar to how you setup a Client in Auth0 for your SPA.
    https://manage.auth0.com/#/apis
  3. The identifier of the API you setup in step 2 needs to be passed as an audience parameter when executing the authentication flow. This will result in an access_token returned, along with the id_token. The access_token is the one you will pass to your API.
  4. Your API middleware will validate the token.