# Auth0 Token with grant\_type = “password”

**URL:** <https://community.auth0.com/t/auth0-token-with-grant-type-password/97870>\
**Category:** Get Help\
**Tags:** apis, application\
**Created:** [January 10, 2023, 4:16pm UTC](https://community.auth0.com/t/auth0-token-with-grant-type-password/97870 "2023-01-10T16:16:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bharati.sarada](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/bharati.sarada/32/42478_2.png) [@bharati.sarada](https://community.auth0.com/u/bharati.sarada)\
**Post date:** [January 10, 2023, 4:16pm UTC](https://community.auth0.com/t/auth0-token-with-grant-type-password/97870/1 "2023-01-10T16:16:22Z")

</div>

I need one help on Authorization part.  
we achieved below points.  
1- We are able to get Management API token with client\_id, client\_secret, audience & “grant\_type”:“client\_credentials”  
2- We are able to create user/get userinfo with this token.  
3- we are able to get access\_token & id\_token by “grant\_type”:“password”, with Username & Password.

Till here we are good.  
Now Question is, we have our own API which is hosted in AWS, Now we need to Authorize that api with id\_token (Considering user specific Token)

I am able to Authorize with Management API token, but that is static for all users, I need to authorize my API with User Based token when I can also get some claims values etc.

Hope my requirement is clear to you.  
Let me know if you need any other information from my end.

Thanks in Advance.

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [January 11, 2023, 11:50pm UTC](https://community.auth0.com/t/auth0-token-with-grant-type-password/97870/3 "2023-01-11T23:50:30Z")

</div>

Hey there @bharati.sarada!

> [@bharati.sarada](#):
>
> Now Question is, we have our own API which is hosted in AWS, Now we need to Authorize that api with id\_token (Considering user specific Token)

You’ll still want to authorize against your API with an access token as opposed to ID token - The access token will contain a `sub` claim which is the ID of the user in Auth0. You can also add any [custom claims](https://auth0.com/docs/get-started/apis/scopes/sample-use-cases-scopes-and-claims) you find necessary using [Actions](https://auth0.com/docs/customize/actions).

Hope this helps point you in the right direction!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [January 25, 2023, 11:51pm UTC](https://community.auth0.com/t/auth0-token-with-grant-type-password/97870/4 "2023-01-25T23:51:12Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.