Using an access token in a rule

[alex15]

Hi,

I created a rule to post some user data to my application which is using auth0 for authentication.

My question: How can I access an accessToken to authenticate the call to my app or how can I ensure the call is coming for a legitimate safe source? What are the best practices around this?

Thank you so much,
Alex

[dan.woda]

Hi @alex15,

Welcome to the Auth0 Community Forum!

You can register the M2M app and there is a node request example you can copy into the rule.

There are some best practices you want to follow concerning storing secrets and minimizing api requests. Specifically you will want to be aware of rate limits and how often this call is being made. Rules run after every successful authentication so you will likely want to make this conditional. Please review this document including those topics:

Rules Best Practices

Hope this helps!

Thanks,
Dan