Full server-side authorization flow without login page

[dzluciano]

I won’t have a web page, I’m just providing a REST API in which users will be able to:

1. POST to /register with and username/email and password to create an user
2. POST to /login with the same username/email and password to obtain an access_token
3. Use that access_token to call other endpoints

I’m stuck in step 2.
I want to know if this use case can be accomplished using Auth0. I was able to create users using the management API and store them using a Username-Password-Authentication connection. I don’t know how to get an access_token with a HTTP request when the user gives me his email and password. All the solutions that I’ve seen points that you need to show an Auth0 login form to the user and then redirect it to your callback_url with an access_token. Once I got a token, I already know how to protect my other endpoints and how to check if the token is valid.

Is possible to accomplish this? Thank you so much!

[dzluciano]

Found the solution here

Programatically Login Javascript API Error

@shoutapp I may be misunderstanding but for your use case auth0-js is not intended to be used server side so if you just need to get tokens for the users we might want to use something like the the nodejs sdk http://auth0.github.io/node-auth0/module-auth.AuthenticationClient.html#passwordGrant would this be what you are looking to do?

[acavanagh]

Hi, I have a similar problem. I have a zuul router that will handle all the authorization. The request will have the user details embedded

Thanks you helped. I am using java. I think I need to use

import com.auth0.client.auth.AuthAPI; login its simpler to your javascript