Hello, we’ve got Angular App (SPA in Auth0) and .NET Core app (API in Auth0), so it works like on the diagram here (SPA +API scenario) Solution Overview (SPAs + API) . I can’t find any option in the dashboard that allows me to restrict access to API only for this SPA. Something like we’ve got for …

Hi there @avenhard ! Sorry for the delayed response on this one but wanted to throw out a couple options :slight_smile: [image] avenhard: Does it mean that someone can create other application (other SPA) in our Auth0 tenant and then will be able to generate access token passing my API audience …

SPA and API scenario - restrict API access

Get Help

system Closed March 3, 2023, 11:33pm 4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Custom Claims in the Access Token Get Help	3	3675	October 22, 2020
Different API access scenarios; own SPA, tenants, third-parties Get Help api , spa , api-keys , api-authorization	5	5022	March 2, 2018
Help understanding Auth0: SPA do you need the custom API? Get Help api	15	6574	August 29, 2019
401/Unauthorized calling from SPA to custom API Get Help	2	3671	June 7, 2022
Auth0 scope with Angular application Get Help api , scopes , spa	5	2327	September 12, 2022

SPA and API scenario - restrict API access

Related topics