Hi, I’m trying to work through the documentation to set up our authorization architecture, and I’m struggling to figure out which of these options will be best. We have 2 applications that currently share the same client information. They are both MVC applications and use OIDC + authorization_code…

You won’t be able to user symmetric algos in a client side app. (i.e. you can’t use HS256 in a SPA). Here is a good post that breaks it down: [image] JWT signing algorithms RS256 vs HS256 JWT.io Both choices refer to what algorithm the identity provider uses to sign the …

Multiple Apps, Single API, mixed oauth flows

Get Help

system Closed February 9, 2021, 9:06pm 6

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Confused on how to implement this architecure Get Help auth0 , angularjs	4	3579	October 16, 2019
Auth0 Configuration with UI-Less Service API and a separate UI app Get Help jwt , spa , api-authorization	2	3755	December 4, 2018
Auth0 secured API and separate NativeApp and SPA App Get Help auth0 , api , native	2	3559	August 30, 2019
Different API access scenarios; own SPA, tenants, third-parties Get Help api , spa , api-keys , api-authorization	5	5021	March 2, 2018
One app having access to multiple APIs Get Help apis , application	5	361	April 19, 2024

Multiple Apps, Single API, mixed oauth flows

Related topics