Rules do not fire on M2M client_credentials flow

[tkurokawa]

Solved by

Getting client metadata in non-interactive clients access tokens

I’m evaluating the feature of using non interactive client for future integrations. In my understanding the protected server (APIs in my case) will only let pass the HTTP requests that have a JWT bearer token in Authorization header (I’m pretty new to Auth0 and authorization and authentication in general so I apologize in advance if I won’t use right terminology) I’ve used Spring security example found here. It works for me (I mean only the valid JWT token passes the Spring Security and I’m a…

and

Managing hooks and rules

I have set up a Single Page Client with implicit grant type, where I successfully have been able to add custom claims to the access token using Rules. In order to keep manageability and consistency I use the Management API with scripts, which I version control. However, now I have a need for implementing some Non Interactive Clients as well, using the Client Credentials grant type. And these access tokens need (some of) the same custom claims as the ones already implemented. Through testing, r…

I have to use hooks, in M2M client credentials flow, not rules.

Thank you,