Generating per-user API keys for services

[hktestuser]

Hello, I am new to auth0 and looking for some help with the following use case -
We have a service that is accessed through a library that we distribute to users and which the users can integrate into their applications. We would like to support auth for this case. Ideally, we would like to let each user generate an API key that they can pass into our library. I looked through the forum posts and came across this one - https://community.auth0.com/t/how-to-generate-tokens-for-api-users - it sounds like this is not a use case that is directly supported in auth0.
Is there a way we can make auth0 work for the case where we distribute a library to the user? What auth flow should I use in this case? Any pointers would be much appreciated!

Thank you!

[tyf]

Hey there @hktestuser welcome to the community!

@hktestuser

Is there a way we can make auth0 work for the case where we distribute a library to the user? What auth flow should I use in this case? Any pointers would be much appreciated!

You might be able to achieve something similar using an M2M approach outlined in this post:

Implementing personal access token

Hey @amit9 - The only possible approach I’m aware of currently would be essentially using client credentials via an M2M app per user. Outside of that it’s not something that’s supported for the time being. I saw that you added to the feedback request, thanks for that!

I also definitely recommend adding your input to the following feedback request as this is a common ask:

Personal Access Tokens or API Keys

Feature: Personal Access Tokens or API Keys Description: Often, one wants to grant users access to the API without requiring a typical log in flow. This is either because users want to grant trusted third parties or themselves access in a programmatic setting where a typical login flow would not make sense. For example, GitHub generates personal access tokens which can be used to access the API, and can be revoked. Use-case: This is a use case useful for not pushing the burden of logging in t…