# Calling management API to update user meta data from SPA

**URL:** <https://community.auth0.com/t/calling-management-api-to-update-user-meta-data-from-spa/64600>\
**Category:** Get Help\
**Tags:** user\_metadata\
**Created:** [June 16, 2021, 3:43pm UTC](https://community.auth0.com/t/calling-management-api-to-update-user-meta-data-from-spa/64600 "2021-06-16T15:43:07Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![swardi](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/swardi/32/24965_2.png) [@swardi](https://community.auth0.com/u/swardi)\
**Post date:** [June 17, 2021, 9:40am UTC](https://community.auth0.com/t/calling-management-api-to-update-user-meta-data-from-spa/64600/4 "2021-06-17T09:40:17Z")

</div>

Thanks for sharing, I tried this and it works well with my passwordless flow too. But I found the security hole to be too big and we cannot use it. The meta data we are going to update is our own internal id which will be add in the JWT Token and will be used to identify user on our backend. Now can you please suggest me the best approach which is secure as well.

---

_[View the full topic](https://community.auth0.com/t/calling-management-api-to-update-user-meta-data-from-spa/64600)._