Hi @craig.wildgoat,
Welcome to the Auth0 Community!
I understand that you are encountering problems using the Authentications API Debugging, specifically with the Unauthorized
error.
Having looked closely at your POST
request, it appears that you are missing the client_secret
parameter.
For example:
curl --request POST \
--url 'https://YOUR_DOMAIN/oauth/token' \
--header 'content-type: application/x-www-form-urlencoded' \
--data grant_type=password \
--data username=user@example.com \
--data password=pwd \
--data audience=YOUR_API_IDENTIFIER \
--data scope=read:sample \
--data client_id=YOUR_CLIENT_ID \
--data client_secret=YOUR_CLIENT_SECRET
You may find our docs on Resource Owner Password Flow useful:
https://auth0.com/docs/authorization/flows/call-your-api-using-resource-owner-password-flow#example-post-to-token-url
Please let me know how this works for you.
Thank you.