# Support for legacy grant\_types

**URL:** <https://community.auth0.com/t/support-for-legacy-grant-types/7206>\
**Category:** Get Help\
**Tags:** legacy-deprecation, legacy-plan, legacy\
**Created:** [June 22, 2017, 7:29pm UTC](https://community.auth0.com/t/support-for-legacy-grant-types/7206 "2017-06-22T19:29:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pavol.duda](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@pavol.duda](https://community.auth0.com/u/pavol.duda)\
**Post date:** [June 22, 2017, 7:29pm UTC](https://community.auth0.com/t/support-for-legacy-grant-types/7206/1 "2017-06-22T19:29:41Z")

</div>

We use Auth0 from October 2016. We have attached our application to your system that uses legacy grant\_types ([http://auth0.com/oauth/legacy/grant-type/ro](http://auth0.com/oauth/legacy/grant-type/ro)). For newly created clients, I found a patch ([Application Grant Types - Auth0 Docs](https://auth0.com/docs/clients/client-grant-types#enable-a-legacy-grant-type)). Everything works reliably as before. We are creating 5-10 new clients every month.

- My question is how long will a legacy grant\_types be maintained?
- Or, in other words, should we reprogram our application and did not use the legacy grant\_types?
- Do you have an estimate of how long a legacy grant\_types will exist?
- Do you have alternative options for authorization by name / password (similar to ‘[http://auth0.com/oauth/legacy/grant-type/ro](http://auth0.com/oauth/legacy/grant-type/ro)’)?
- Is there any reason not to use legacy grant\_types?

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [June 23, 2017, 3:58pm UTC](https://community.auth0.com/t/support-for-legacy-grant-types/7206/2 "2017-06-23T15:58:50Z")

</div>

( **Q1** ) There is still not a definitive timeline for when legacy grants will stop being available/supported, but of course any dates when known will be communicated with sufficient time in advance. ( **Q2** ) Ideally you should not wait for the dates to be communicated because although you’ll have time to make the change after the communication of dates, **moving immediately to non-legacy grants will possibly mean a better overall experience**. Do have in mind that not all of the legacy grants already have equivalent non-legacy equivalents so check [this table](https://auth0.com/docs/clients/client-grant-types#secure-alternatives-to-the-legacy-grant-types) as a reference.

( **Q3** ) See answer for _Q1_.

( **Q4** ) Yes, for username/password authentication in a direct way (aka resource owner password credentials grant) you can use the `/oauth/token` endpoint as the alternative for `/oauth/ro`. Check the [reference docs](https://auth0.com/docs/api-auth/tutorials/password-grant) on information relevant to this.

( **Q5** ) The reasons will be, in general, the ones associated with the notion of legacy. They are supported but will not receive new features, they may not exactly follow current standards in some situations, etc.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:54am UTC](https://community.auth0.com/t/support-for-legacy-grant-types/7206/3 "2018-03-02T05:54:52Z")

</div>