|
Cookies vs. Access Tokens: Securing the Authorization Code Flow in Browser-Based Apps
|
|
2
|
101
|
October 7, 2026
|
|
Use Custom Domain instead of Canonical Domain in Auth0 Dashboard API Test page
|
|
3
|
69
|
August 31, 2026
|
|
Expiration DateTime for Machine to Machine Applications (Client Credentials flow)
|
|
1
|
72
|
April 30, 2026
|
|
Five Myths About JWTs Debunked
|
|
1
|
44
|
August 7, 2025
|
|
OAuth 2.0 Access Tokens and the Principle of Least Privilege
|
|
1
|
69
|
July 17, 2025
|
|
Enrich Auth0 Access Tokens with Auth0 FGA Data
|
|
1
|
77
|
March 18, 2025
|
|
Expire access token when Logout
|
|
2
|
8125
|
July 19, 2024
|
|
Add Organization metadata in token
|
|
2
|
3204
|
September 15, 2022
|
|
Expo Implementation. Invalid access_token
|
|
1
|
2885
|
September 9, 2022
|
|
Resource Owner Password flow only works with headers removed
|
|
1
|
2088
|
May 26, 2022
|
|
Identity provider access tokens in actions
|
|
8
|
4264
|
January 18, 2022
|
|
/api/v2/users/{Auth0UserId} returning token invalid after successfully calling /oauth/token
|
|
4
|
3666
|
December 7, 2021
|
|
Get AccessToken to authorize API
|
|
4
|
2922
|
September 30, 2021
|
|
Cannot Complete Silent Auth on Mobile Device: `login_required`
|
|
2
|
4369
|
May 6, 2021
|
|
App continuously sending access tokens
|
|
3
|
2685
|
April 16, 2021
|
|
How to get JWT access token instead of opaque access token?
|
|
8
|
6623
|
April 1, 2021
|
|
Using 'sub' as user id
|
|
1
|
11655
|
February 22, 2021
|
|
How to get Sub Claim from Access Token
|
|
7
|
8277
|
February 10, 2021
|
|
Id Token for backend API
|
|
1
|
4217
|
January 21, 2021
|
|
Verifying at_hash on rs256 id token without access token
|
|
0
|
4959
|
March 17, 2020
|
|
Access_token using pkce
|
|
1
|
4287
|
February 16, 2018
|
|
Method to get new access_token based on refresh_token in PHP SDK
|
|
2
|
3932
|
February 9, 2018
|
|
Strange access token returned by SAML
|
|
2
|
5680
|
February 7, 2018
|
|
401 when calling API (Spring) in a SPA (AngularJS)
|
|
2
|
5297
|
January 17, 2018
|
|
Token verification on server side
|
|
2
|
4356
|
December 28, 2017
|
|
Invalid certificate from jwks for signing JWT
|
|
1
|
5668
|
December 28, 2017
|
|
Setting scope in access_token breaks id_token
|
|
1
|
4851
|
December 21, 2017
|
|
API calling return 401 when using access token return by Auth0.webAuth() login
|
|
1
|
5086
|
December 7, 2017
|
|
AngularJS no longer getting back access token
|
|
1
|
4333
|
November 27, 2017
|
|
Do I need to store IDP access_token + refresh_token on my own, or I can use Auth0?
|
|
1
|
4426
|
November 22, 2017
|