Generating per-user API keys for services

[tyf]

Hey there @hktestuser welcome to the community!

@hktestuser

Is there a way we can make auth0 work for the case where we distribute a library to the user? What auth flow should I use in this case? Any pointers would be much appreciated!

You might be able to achieve something similar using an M2M approach outlined in this post:

Implementing personal access token

Hey @amit9 - The only possible approach I’m aware of currently would be essentially using client credentials via an M2M app per user. Outside of that it’s not something that’s supported for the time being. I saw that you added to the feedback request, thanks for that!

I also definitely recommend adding your input to the following feedback request as this is a common ask:

Personal Access Tokens or API Keys

Feature: Personal Access Tokens or API Keys Description: Often, one wants to grant users access to the API without requiring a typical log in flow. This is either because users want to grant trusted third parties or themselves access in a programmatic setting where a typical login flow would not make sense. For example, GitHub generates personal access tokens which can be used to access the API, and can be revoked. Use-case: This is a use case useful for not pushing the burden of logging in t…