Lock file - /authorize returning 403 - Grant type 'implicit' not allowed for the client

I do not have this grant enabled for my application, and I am not even sure why auth0 lock is making this request. I am using responseType: code, why is a request being made when the lock file renders (v12.4) to /authorize endpoint passing response_type: token id_token and returning 403? This is polluting the logs as well. Is it due to having: Lock Configuration Options in my lock file? Furthermore, what is this field for? Is it relevant if I use Idp connections like azure AD?

Hi @daniel.bain,

Here you can check more details about Application Grant Types:

To activate the Implicit Grant Type in your application go to your dashboard > Applications > Applications > select your Auth0 application > Settings and scroll down until you reach the Advanced settings.

Select the Grant Types tab and enable Implicit.

If you have any other questions feel free to reach out.

Have a good one,
Vlad

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.