Big inconsistency in API for passwordless

[jonas.lauber]

Hi Nico,

No, I couldn’t find a solution because there is none… Passwordless is not officially supported for direct authentication… One is supposed to use the universal login with redirection on auth0’s website…

We currently dropped support for email in our app and only rely on sms… This is a big shame and as it is not officially supported, the workaround with default directory (allowing only one connection sms versus email) could be removed anytime, leaving us in a very bad situation…

I very much regret this decision and my team and I are thinking about an alternative to Auth0 to address this problem.

Here are the posts I found saying this explicitly:

Passwordless /oauth/ro replacement?

Thanks for that, @sgmeyer! The mfa flow looks good but I’m not sure it fits what I need and I don’t think universal login will work either. My app allows sign up by email (passwordless only) and once authenticated, users have the ability to add a mobile number which can be subsequently used to login with - I don’t allow sms sign ups. For that I need to be able to send and verify a one time code sent via SMS after which the secondary user (with SMS connection type) is linked to the primary accou…

/oauth2/token endpoint and passwordless login

I am trying to create a passwordless login (sms and email) in a react-native app without redirection to the hosted page. The /password/start endpoint works fine for both sms and email and send a code. The verify code the /oauth/ro has been deprecated in favor of //oauth/token. Using the “Resource Owner Password” Grant type on /oauth/token I the following issue: If I specify a grant type of http://auth0.com/oauth/grant-type/password-realmwith the username and password set correctly and then sp…

Login in with sms pin using /oauth/token endpoint possible?

In response to: https://auth0.com/forum/t/user-info-response-incomplete-using-updated-access-toke/5831 Would I also be able to use the /oauth/token endpoint using a password obtained through the passwordless endpoint? I tried to call /passwordless/start and use the sms pin as the “password” for the /oauth/token endpoint using the realm “passwordless” (also tried “sms”), however it gives me: { "error": "access_denied", "error_description": "Unauthorized" } Isn’t that a valid flow?