Call Management API from a SPA - Documentation Clarification

[tyf]

Hey @niall!

Thanks for the detailed description - I guess first and foremost it would be good to know what exactly you are looking to accomplish via the Management API. I say this because any Management API access token you get via a SPA is going to be fairly limited and may not suffice for your use case.

Ideally, the getting and using of Management API access tokens should be handled by a backend as outlined in the following FAQ:

How can I enable users to change their email address from a SPA or native app?

Question: How can I enable users to change their email address from a SPA or native app? Answer: Public clients (like SPAs and native applications) are restricted from requesting tokens for the management API with the proper scopes for updating a user’s email. These types of applications are limited to a few specific scopes. Because of these limitations, email change requests from public clients must flow through a backend or proxy API. This could be a serverless function with the sole purpose…

If you’re interested, here is an example using our Node Management Client paired with our React sample app.