Resource Owner Password flow responds with 500

Hi @michael-bamboo ,

Thank you for posting this topic on the Auth0 Community!

Is this flow not possible with a Machine-to-Machine app? Am I missing something else, somewhere… somehow?

In this ROPG documentation, the steps are for the Regular Web App instead of the Machine-to-Machine app. For the M2M application, Auth0 uses the Client Credential flow, that is, it authenticates and authorizes the app rather than a user.

Here are the scripts:

curl --request POST \
  --url 'https://YOUR_DOMAIN/oauth/token' \
  --header 'content-type: application/x-www-form-urlencoded' \
  --data grant_type=client_credentials \
  --data client_id=YOUR_CLIENT_ID \
  --data client_secret=YOUR_CLIENT_SECRET \
  --data audience=YOUR_API_IDENTIFIER

Hope this helps!