Hi Kevin.
I think Joao, in the Community thread you link to, says that you should avoid localhost
if you don’t want the consent page.
I’m not quite sure, however, that the consent page is required here (you would get a consent_required
instead of login_required
if the consent step is preventing Auth0 from silently issuing a token).
Are you specifying the audience
in the options, along with the domain
and the clientId
?
Can you try getTokenWithPopup()
to get the access token? I’m curious if you get a login prompt (as if the session is ending too son, or cookies aren’t being sent), a consent screen (which should be required only once), or something different.