Secure public page

Get Help
,
3

To secure calls to your API from your SPA, you can consider using JSON Web Tokens (JWTs) provided by Auth0. Here’s how you can achieve this:

  1. When a user authenticates with Auth0 in your SPA, you can obtain an access token from Auth0’s authentication service.
  2. Include this access token as an Authorization header in API requests made from your SPA to your API. This allows your API to validate the token and ensure that the request is coming from an authenticated user.
  3. In your API, use Auth0’s JWT verification library or a JWT library compatible with your programming language to validate the signature and authenticity of the access token. This involves verifying the token’s signature with the public key provided by Auth0.
  4. Once the token is validated, you can extract the user’s permissions and other relevant information from the token’s payload to authorize and filter the accessible resources in your API.

By utilizing JWTs and validating them in your API, you can ensure the security and authenticity of requests made from your SPA to your API. Remember to properly configure the audience and issuer settings in the JWT verification process to ensure the validity of the tokens.

1 Like