@john.gateley Hey, I am curios how management api work or set up in my project(single-page-application, auth0.js)? I haven’t gone deep into this part yet, but please give me a hint how can I do that, it will save my time, thank you.
The reason why I need to use management api because I need to customize mfa page under new experience, but can management api + spa can do that? Base on what I know, there is limitation (spa + management api) since public security reason.
You only need to set up the MFA page (or any ULP page) once. This is not part of your SPA. You can do it via the link I sent above, setting the access token and using that page to upload. Or via your CI/CD stack.
But it shouldn’t be part of the SPA, as you note, because you shouldn’t have a client secret in a SPA.