Hi @michael-bamboo ,
Thank you for posting this topic on the Auth0 Community!
Is this flow not possible with a Machine-to-Machine app? Am I missing something else, somewhere… somehow?
In this ROPG documentation, the steps are for the Regular Web App instead of the Machine-to-Machine app. For the M2M application, Auth0 uses the Client Credential flow, that is, it authenticates and authorizes the app rather than a user.
Here are the scripts:
curl --request POST \
--url 'https://YOUR_DOMAIN/oauth/token' \
--header 'content-type: application/x-www-form-urlencoded' \
--data grant_type=client_credentials \
--data client_id=YOUR_CLIENT_ID \
--data client_secret=YOUR_CLIENT_SECRET \
--data audience=YOUR_API_IDENTIFIER
Hope this helps!