Hey there @matterdox!
If you’re developing a 1st party client, head to the APIs page and select your API. In the Settings
you’ll see an option to Allow Skipping User Consent
which you should enable.
This toggle allows skipping consent for verifiable first party clients. If your client is hosted on localhost
, Auth0 has no reason to believe that it’s truly a 1st party client as the user may be maliciously (or without their knowledge) running any client on the localhost
. If you want to skip the consent page during development, you can setup a mapping in your hosts
file to map localhost
to app.local
for example.
Reference point:
Hope that helps!