Topics tagged access

Topic	Replies	Views	Activity
Cookies vs. Access Tokens: Securing the Authorization Code Flow in Browser-Based Apps Community News access_token , cookie When architecting a Single Page Application (SPA) in frameworks like React, Angular, or Vue, developers inevitably reach a crossroads: Where should I store my access tokens once they are returned to the browser? This arc…	2	34	October 7, 2026
Use Custom Domain instead of Canonical Domain in Auth0 Dashboard API Test page Get Help auth0 , access_token , authentication , custom-domain	3	50	August 31, 2026
Expiration DateTime for Machine to Machine Applications (Client Credentials flow) Product Feedback jwt , access_token , expiration , client_credentials , token-expiration , client-credentials , m2m , m2m-tokens , actions	1	59	April 30, 2026
Five Myths About JWTs Debunked Blog Discussions token , jwt , id_token , access_token , confused-developer	1	35	August 7, 2025
OAuth 2.0 Access Tokens and the Principle of Least Privilege Blog Discussions oauth , scopes , access_token , security , oauth2 , leasts_privilege	1	66	July 17, 2025
Enrich Auth0 Access Tokens with Auth0 FGA Data Blog Discussions auth0 , access_token , fga	1	70	March 18, 2025
Expire access token when Logout Get Help logout , auth0 , access_token	2	8109	July 19, 2024
Add Organization metadata in token Get Help access_token , metadata , organizations	2	3191	September 15, 2022
Expo Implementation. Invalid access_token Get Help jwt , api , access_token , spa , expo	1	2881	September 9, 2022
Resource Owner Password flow only works with headers removed Get Help auth0 , access_token , login	1	2078	May 26, 2022
Identity provider access tokens in actions Get Help access_token , access-token	8	4243	January 18, 2022
/api/v2/users/{Auth0UserId} returning token invalid after successfully calling /oauth/token Get Help api , access_token	4	3648	December 7, 2021
Get AccessToken to authorize API Get Help nodejs , access_token , api-authorization	4	2902	September 30, 2021
Cannot Complete Silent Auth on Mobile Device: `login_required` Get Help jwt , access_token , mobile , silent-auth , auth0-spa-js	2	4354	May 6, 2021
App continuously sending access tokens Get Help access_token , access-token	3	2666	April 16, 2021
How to get JWT access token instead of opaque access token? Get Help jwt , access_token , opaque-tokens	8	6596	April 1, 2021
Using 'sub' as user id Get Help access_token , custom-claims	1	11644	February 22, 2021
How to get Sub Claim from Access Token Get Help access_token , spa , js , auth0-spa-js	7	8257	February 10, 2021
Id Token for backend API Get Help id_token , access_token , refresh_token	1	4206	January 21, 2021
Verifying at_hash on rs256 id token without access token JWT.io id_token , nodejs , access_token , python , claim	0	4950	March 17, 2020
Access_token using pkce Get Help access_token , pkce , get-user-info-using-	1	4276	February 16, 2018
Method to get new access_token based on refresh_token in PHP SDK Get Help sdk , access_token , php , refresh_token	2	3923	February 9, 2018
Strange access token returned by SAML Get Help saml , sso , access_token , login , access-token	2	5666	February 7, 2018
401 when calling API (Spring) in a SPA (AngularJS) Get Help api , id_token , access_token , spring , angularjs	2	5287	January 17, 2018
Token verification on server side Get Help access_token , java , verification	2	4339	December 28, 2017
Invalid certificate from jwks for signing JWT Get Help jwt , jwks , access_token , certificate	1	5658	December 28, 2017
Setting scope in access_token breaks id_token Get Help id_token , access_token , scope , bug-in-auth0	1	4843	December 21, 2017
API calling return 401 when using access token return by Auth0.webAuth() login Get Help access_token , login , ios , api-authorization	1	5079	December 7, 2017
AngularJS no longer getting back access token Get Help bug , access_token , access-token , hosted-login-page , angularjs	1	4323	November 27, 2017
Do I need to store IDP access_token + refresh_token on my own, or I can use Auth0? Get Help access_token , tokens , refresh_token , idp	1	4415	November 22, 2017

Cookies vs. Access Tokens: Securing the Authorization Code Flow in Browser-Based Apps

access_token , cookie

When architecting a Single Page Application (SPA) in frameworks like React, Angular, or Vue, developers inevitably reach a crossroads: Where should I store my access tokens once they are returned to the browser? This arc…