If I have an application (Regular web application, Single page web application (SPA), Native application)… Is the purpose of “Client Secret” to check or validate the JWT (back-end)? The only way to update:xxx, read:xxx, delete:xxx or do any actions into Auth0 is with an application “Machine to mach…

Hi @gersveo , Welcome to the Auth0 Community! SPA and native applications run on the user’s device. This could be a browser or mobile device and as such, these applications cannot keep any information secret from the user. If you were to request/issue a management API token from a single page app/…

Doubt about "Client Secret" and Applications types

Get Help

dan.woda November 29, 2021, 5:42pm 5

I’m sorry, it’s not clear to me what you are describing. Can you give a specific example of what you are trying to accomplish?

Topic		Replies	Views
Is my application a SPA or Regular Web Application? (and the consequences)? Get Help jwt , auth0 , api , management-api , login	2	2050	December 16, 2024
Change Public Application to Confidential Get Help configuration , application	2	538	November 28, 2023
Storing client secret in SPA Get Help security , client-secret	2	12452	August 30, 2019
Sms passwordless authentication using auth0.js Get Help management-api , connections-management-api	1	1440	March 1, 2023
Auth Code + PKCE. Secret VS No Secret? Get Help jwt , auth0 , pkce	5	4914	April 14, 2021

Doubt about "Client Secret" and Applications types

Related topics