|
Cookies vs. Access Tokens: Securing the Authorization Code Flow in Browser-Based Apps
|
|
2
|
85
|
October 7, 2026
|
|
Use Custom Domain instead of Canonical Domain in Auth0 Dashboard API Test page
|
|
3
|
66
|
August 31, 2026
|
|
Expiration DateTime for Machine to Machine Applications (Client Credentials flow)
|
|
1
|
68
|
April 30, 2026
|
|
Five Myths About JWTs Debunked
|
|
1
|
42
|
August 7, 2025
|
|
OAuth 2.0 Access Tokens and the Principle of Least Privilege
|
|
1
|
69
|
July 17, 2025
|
|
Enrich Auth0 Access Tokens with Auth0 FGA Data
|
|
1
|
76
|
March 18, 2025
|
|
Expire access token when Logout
|
|
2
|
8122
|
July 19, 2024
|
|
Add Organization metadata in token
|
|
2
|
3201
|
September 15, 2022
|
|
Expo Implementation. Invalid access_token
|
|
1
|
2884
|
September 9, 2022
|
|
Resource Owner Password flow only works with headers removed
|
|
1
|
2086
|
May 26, 2022
|
|
Identity provider access tokens in actions
|
|
8
|
4257
|
January 18, 2022
|
|
/api/v2/users/{Auth0UserId} returning token invalid after successfully calling /oauth/token
|
|
4
|
3657
|
December 7, 2021
|
|
Get AccessToken to authorize API
|
|
4
|
2916
|
September 30, 2021
|
|
Cannot Complete Silent Auth on Mobile Device: `login_required`
|
|
2
|
4367
|
May 6, 2021
|
|
App continuously sending access tokens
|
|
3
|
2680
|
April 16, 2021
|
|
How to get JWT access token instead of opaque access token?
|
|
8
|
6611
|
April 1, 2021
|
|
Using 'sub' as user id
|
|
1
|
11655
|
February 22, 2021
|
|
How to get Sub Claim from Access Token
|
|
7
|
8270
|
February 10, 2021
|
|
Id Token for backend API
|
|
1
|
4212
|
January 21, 2021
|
|
Verifying at_hash on rs256 id token without access token
|
|
0
|
4957
|
March 17, 2020
|
|
Access_token using pkce
|
|
1
|
4287
|
February 16, 2018
|
|
Method to get new access_token based on refresh_token in PHP SDK
|
|
2
|
3930
|
February 9, 2018
|
|
Strange access token returned by SAML
|
|
2
|
5674
|
February 7, 2018
|
|
401 when calling API (Spring) in a SPA (AngularJS)
|
|
2
|
5295
|
January 17, 2018
|
|
Token verification on server side
|
|
2
|
4351
|
December 28, 2017
|
|
Invalid certificate from jwks for signing JWT
|
|
1
|
5663
|
December 28, 2017
|
|
Setting scope in access_token breaks id_token
|
|
1
|
4851
|
December 21, 2017
|
|
API calling return 401 when using access token return by Auth0.webAuth() login
|
|
1
|
5083
|
December 7, 2017
|
|
AngularJS no longer getting back access token
|
|
1
|
4328
|
November 27, 2017
|
|
Do I need to store IDP access_token + refresh_token on my own, or I can use Auth0?
|
|
1
|
4424
|
November 22, 2017
|