Hi @diogo.baeder,
Welcome to the Auth0 Community !
The steps taken above seem to be the correct ones in order to skip user-consent for a first-party-application, but the 3 things that I was able to find that might interfere with accomplishing this might be:
- adding
“prompt=consent”
to your authorize call - if
localhost
appears in any domain in the application’s Allowed Callback URLs setting - this will also depend if the audience is a Custom API or the Management API - you can check out this Knowledge Article about this
Hope this helps your case, but others as well!
Thanks,
Remus