# Token Endpoint Authentication Method Post vs None

**URL:** <https://community.auth0.com/t/token-endpoint-authentication-method-post-vs-none/77488>\
**Category:** Get Help\
**Tags:** jwt, auth0, login\
**Created:** [February 2, 2022, 1:27pm UTC](https://community.auth0.com/t/token-endpoint-authentication-method-post-vs-none/77488 "2022-02-02T13:27:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![elgin.cahangirov](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/elgin.cahangirov/32/34863_2.png) [@elgin.cahangirov](https://community.auth0.com/u/elgin.cahangirov)\
**Post date:** [February 2, 2022, 1:27pm UTC](https://community.auth0.com/t/token-endpoint-authentication-method-post-vs-none/77488/1 "2022-02-02T13:27:57Z")

</div>

When I make POST request to **[https://my.auth0.domain/oauth/token](https://my.auth0.domain/oauth/token)**, it return 401 response with body:

```auto

{
    "error": "access_denied",
    "error_description": "Unauthorized"
}

```

My request body is:

```auto
{
    "grant_type": "password",
    "username": "user@emal.com",
    "password": "user password",
    "client_id": "client id for my app",
    "client secret": "client secret for my app",
    "audience": "my api identifier"
}

```

After changing **Token Endpoint Authentication Method** from _Post_ to _None_, it works as expected by returning 200 response and access token in the body. But after making this change in settings, **Client Credentials** is disabled in grant types of the application. As a result, I cannot get access token for the client:

**Client is not authorized to access “my identifier”. You need to create a “client-grant” associated to this API. See: [Auth0 Management API v2](https://auth0.com/docs/api/v2#!/Client_Grants/post_client_grants)**

So, these two are mutually exclusive to achieve. Should I create two different application for being able to both getting client and user access tokens?

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [February 22, 2022, 10:10pm UTC](https://community.auth0.com/t/token-endpoint-authentication-method-post-vs-none/77488/3 "2022-02-22T22:10:16Z")

</div>

Hi @elgin.cahangirov,

Welcome to the Auth0 Community and sorry for the delayed response!

Can you tell us a bit about your use case? What type of application are you using?

Additionally, you should be able to set the token authentication type to POST, and enable the client credentials grant in the _Advanced Settings → Grant Types_ options. Have you tried this?

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [April 8, 2022, 4:40pm UTC](https://community.auth0.com/t/token-endpoint-authentication-method-post-vs-none/77488/4 "2022-04-08T16:40:04Z")

</div>