I’m struggling to understand how to securely use Auth0 to deliver tokens to my private API and handles scope/permissions this way. I have create an API on the dashboard with a couple of scopes , user and admin. In my Angular4 app, as soon as the users validates their credentials using auth0-js weba…

If the scopes you define in association with a given API have different levels of authorization then you can implement that authorization decision through a custom rule. The logic in the rule would override the requested scopes and only allow a scope if the required conditions were met (in your case…

What prevents scope tampering?

Get Help

Topic		Replies	Views
API call with permissions/scopes Angular Get Help angular , auth0 , api , login , permissions	1	5009	October 30, 2020
Auth0 scope with Angular application Get Help api , scopes , spa	5	2339	September 12, 2022
Trobles with getting APIs scopes Get Help scopes , authorization	3	4352	March 2, 2018
How to add client scopes and validate them for each login? Get Help scopes	4	3604	September 14, 2021
Auth0 adding scopes for an API Get Help scopes , access-token , tokens	2	4533	March 2, 2018

What prevents scope tampering?

Related topics