Can we obtain Access Token for our API without any authentication happening before?

[clubbing]

Hi.

Our REST API requires an access token. For specific Endpoints, a valid JWT token containing an authenticated user is required, for some others not.

However, as far as I know, to retrieve access tokens using Auth0 will require a valid user login.
Is it possible to have both worlds? To obtain an Access token without any requirements (like as an “Anonymous”) and obtain access tokens requiring authenticated users?

Many Thanks in advance!

[ricardo.batista]

Hi @clubbing

You can retrieve access tokens without a user login by using the Client Credentials flow. With machine-to-machine (M2M) applications, such as CLIs, daemons, or services running on your back-end, the system authenticates and authorizes the app rather than a user. You’ll just need to provide the client id and secret to get a valid access token back. Please see more info here:

Client Credentials Flow