We have a SPA + API flow pretty much exactly as it described here. We used to use id_tokens, but are now using access_tokens to authenticate to our API as is recommended by the docs. We are also setting our clients to be OIDC compliant which is also recommended for future-proofing. Authentication…

Impersonation with custom API audience not supported?

Topic		Replies	Views
[SPA + API] Can NOT Get Audience Correct Get Help jwt , auth0 , api , spa , audience	4	5127	February 9, 2019
Help understanding Auth0: SPA do you need the custom API? Get Help api	15	6578	August 29, 2019
Authentication with SPA and API Get Help jwt , auth0	2	4072	September 17, 2020
SPA + User Profile + Custom API Get Help	0	1660	January 18, 2022
Newbie: Confused about Auth0 setting and workflow Get Help	3	3419	January 29, 2019