Should I implement Auth0 on my Laravel backend or my frontend Nuxt.js application?

[dan.woda]

@acdeux

I’m still on the free plan and 1000 API calls (machine 2 machine) a month isn’t really enough I guess. I’m expecting to be having around 50 API calls a day for now. That quickly adds up, or am I understanding things wrong?

That should not count towards your quota. M2M calls are ones that originate with a client credentials grant, and have not user interaction. See this post for a thorough explanation and let me know if you have questions:

Does/oauth/token API calls count toward Machine to Machien tokens?

That endpoint may be used as part of very distinct flows, but if the flow involves an end-user which would mean you would be using that endpoint to exchange authorization code, refresh tokens or user credentials for tokens then this would not count for machine to machine quota. What counts for the M2M quota would be a client credentials exchange (Client Credentials Flow) performed through that endpoint and for which an access token for a custom API you defined in the APIs section is issued. Th…

@acdeux

how do I make sure Laravel knows the user that’s logged in?

Send the API the access token, if it is valid and not expired, then return the resource.