# \#api-authorization **URL:** https://community.auth0.com/tag/api-authorization/392.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Dbconnection/signup api Invalid Json response](https://community.auth0.com/t/dbconnection-signup-api-invalid-json-response/86134)
**Author:** [@authneumoney](https://community.auth0.com/u/authneumoney)\ **Replies:** 2\ **Last updated:** [June 30, 2022, 6:13am UTC](https://community.auth0.com/t/dbconnection-signup-api-invalid-json-response/86134 "2022-06-30T06:13:02Z")
Team, I am trying to call /dbconnection/signup api to create a user using python code I user the following JSON create\_user\_body = { ‘client\_id’: ‘MY\_CLIENT\_ID’, ‘email’: ‘ganesh.kumar@reflectionsinfos.com’, ‘passw… --- ## [.NET Core Angular 401 when calling API](https://community.auth0.com/t/net-core-angular-401-when-calling-api/71413)
**Author:** [@richardrflores](https://community.auth0.com/u/richardrflores)\ **Replies:** 2\ **Last updated:** [October 28, 2021, 12:13pm UTC](https://community.auth0.com/t/net-core-angular-401-when-calling-api/71413 "2021-10-28T12:13:30Z")
Hi, I have a .NET Core Angular app that has been setup to make secure calls to an API using but I’m getting a 401error when the client application makes the call to the API. This issue has been reported several times, … --- ## [Get AccessToken to authorize API](https://community.auth0.com/t/get-accesstoken-to-authorize-api/70426)
**Author:** [@camediaonline](https://community.auth0.com/u/camediaonline)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 6:26pm UTC](https://community.auth0.com/t/get-accesstoken-to-authorize-api/70426 "2021-09-30T18:26:06Z")
Hi there, I have just started with Auth0, got through some videos read the docs and made an small local nodejs client app (localhost:3000) that could authenticate using the forms from Auth0. Then i took a look howto pr… --- ## [Can't make post request from angular to C# net core api](https://community.auth0.com/t/cant-make-post-request-from-angular-to-c-net-core-api/68337)
**Author:** [@sjpereyra\_dev](https://community.auth0.com/u/sjpereyra_dev)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 9:14am UTC](https://community.auth0.com/t/cant-make-post-request-from-angular-to-c-net-core-api/68337 "2021-08-26T09:14:48Z")
i’m trying to post information to my backend, wich is .Net 5 from my angular12 SPA with something like this return this.http.post(‘https://localhost:44307/something/postRequest’, data); always returns error 401 unautho… --- ## [Set directory per API request](https://community.auth0.com/t/set-directory-per-api-request/62809)
**Author:** [@GuidovTricht](https://community.auth0.com/u/GuidovTricht)\ **Replies:** 4\ **Last updated:** [May 19, 2021, 8:33am UTC](https://community.auth0.com/t/set-directory-per-api-request/62809 "2021-05-19T08:33:34Z")
Hi all, I have an application which currently uses 2 different stores for users. 1 is a custom database and authentication code, the other uses Auth0 and the API authentication APIs to authenticate users. I would like … --- ## [Authorization API endpoint returns URL in an odd format](https://community.auth0.com/t/authorization-api-endpoint-returns-url-in-an-odd-format/57769)
**Author:** [@mvxt](https://community.auth0.com/u/mvxt)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 1:26pm UTC](https://community.auth0.com/t/authorization-api-endpoint-returns-url-in-an-odd-format/57769 "2021-02-25T13:26:54Z")
I’m trying to implement a flow to link user accounts, and I’m trying to initiate this on the client side. When calling the Authorization endpoint /authorize, the user is able to log in, but after the user is redirected,… --- ## [Is verifying a JWT Access Token enough for custom API access?](https://community.auth0.com/t/is-verifying-a-jwt-access-token-enough-for-custom-api-access/57575)
**Author:** [@iltimas.doha](https://community.auth0.com/u/iltimas.doha)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 10:57pm UTC](https://community.auth0.com/t/is-verifying-a-jwt-access-token-enough-for-custom-api-access/57575 "2021-02-10T22:57:09Z")
Is verifying a JWT Access Token enough for custom API access? Or do I need to hit somesort of Auth0 endpoint to ensure the access token is valid? If the backend JWT verifier confirms the signature and the form of JWT, do… --- ## [Why is the Autorization API so slow?](https://community.auth0.com/t/why-is-the-autorization-api-so-slow/51303)
**Author:** [@william.ollivier](https://community.auth0.com/u/william.ollivier)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 9:25pm UTC](https://community.auth0.com/t/why-is-the-autorization-api-so-slow/51303 "2020-10-13T21:25:34Z")
Hello, I have implemented an API endpoint to delete an entity tied to a group in the Auth0 Autorization world. Here is the workflow: List all group members Remove all group members from group (1 call with list of use… --- ## [Flow: Password. Always receive all Scopes when User didin't have Permissions and Rôles](https://community.auth0.com/t/flow-password-always-receive-all-scopes-when-user-didint-have-permissions-and-roles/50138)
**Author:** [@msavard](https://community.auth0.com/u/msavard)\ **Replies:** 4\ **Last updated:** [September 23, 2020, 2:33pm UTC](https://community.auth0.com/t/flow-password-always-receive-all-scopes-when-user-didint-have-permissions-and-roles/50138 "2020-09-23T14:33:40Z")
Hi, I create my test unit and for test not Authorization User, I create a new User in Auth0 without Role. But when I run my test, the “Success Exchange” send all Scope value for my Application and not the Scope from Use… --- ## [Redirection from rule and Authz Role evaluation](https://community.auth0.com/t/redirection-from-rule-and-authz-role-evaluation/49130)
**Author:** [@ewright](https://community.auth0.com/u/ewright)\ **Replies:** 1\ **Last updated:** [September 4, 2020, 8:55pm UTC](https://community.auth0.com/t/redirection-from-rule-and-authz-role-evaluation/49130 "2020-09-04T20:55:01Z")
Documentation says that a rule may redirect to an external system and then redirect back to continue with the pipeline. A typical scenario is to add information to their profile. Problem: I find that authz-core roles w… --- ## [ENOENT Error in the Authorization Extension](https://community.auth0.com/t/enoent-error-in-the-authorization-extension/44350)
**Author:** [@alexander-luminovo](https://community.auth0.com/u/alexander-luminovo)\ **Replies:** 5\ **Last updated:** [June 12, 2020, 1:45pm UTC](https://community.auth0.com/t/enoent-error-in-the-authorization-extension/44350 "2020-06-12T13:45:48Z")
Hi, I am still using the Authorization Extension because of the group functionality. I have the following use case in my application: When a new user signs up in our custom sign up page, in my backend, I send the data w… --- ## [Authorization Extension Deprecation](https://community.auth0.com/t/authorization-extension-deprecation/43599)
**Author:** [@liam1](https://community.auth0.com/u/liam1)\ **Replies:** 3\ **Last updated:** [June 2, 2020, 8:31am UTC](https://community.auth0.com/t/authorization-extension-deprecation/43599 "2020-06-02T08:31:30Z")
I’m looking to set up authorization with Auth0. The Authorization Extension seems to be what I’m looking for (this is largely down to the Group feature), but the documentation on it mentions that it will be deprecated th… --- ## [Configuring Auth0 With an Azure API Issues](https://community.auth0.com/t/configuring-auth0-with-an-azure-api-issues/40813)
**Author:** [@ramsey.kilani](https://community.auth0.com/u/ramsey.kilani)\ **Replies:** 0\ **Last updated:** [April 9, 2020, 6:07pm UTC](https://community.auth0.com/t/configuring-auth0-with-an-azure-api-issues/40813 "2020-04-09T18:07:11Z")
Hi, We’re having some issues using Auth0 for OAuth 2.0. We’re following this guide from Auth0. We’ve managed to setup an API and configure the security with our Auth0 domain, steps 1-4. However, we are having some tro… --- ## [Lets talk about resource authorization](https://community.auth0.com/t/lets-talk-about-resource-authorization/39045)
**Author:** [@Torbjorn](https://community.auth0.com/u/Torbjorn)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 11:51am UTC](https://community.auth0.com/t/lets-talk-about-resource-authorization/39045 "2020-03-09T11:51:26Z")
Introduction It is fairly easy to get a role and permission based authorization system going for an API and it is sufficient for most use cases. However, I am in need of more fine grained authorization in some of my use… --- ## [Cannot get authorization (roles, permissions) data in user data](https://community.auth0.com/t/cannot-get-authorization-roles-permissions-data-in-user-data/22411)
**Author:** [@huyennbl](https://community.auth0.com/u/huyennbl)\ **Replies:** 3\ **Last updated:** [March 12, 2019, 11:04am UTC](https://community.auth0.com/t/cannot-get-authorization-roles-permissions-data-in-user-data/22411 "2019-03-12T11:04:32Z")
Hello, I’m trying to get an account’s roles and permissions then add them to idToken as custom claims. But it seems like I missed something or misconfigured so authorization extension doesn’t work as I expected. Please h… --- ## [Best practices for authenticating API requests from domains you don't control](https://community.auth0.com/t/best-practices-for-authenticating-api-requests-from-domains-you-dont-control/19648)
**Author:** [@jcochrane](https://community.auth0.com/u/jcochrane)\ **Replies:** 4\ **Last updated:** [January 11, 2019, 2:47pm UTC](https://community.auth0.com/t/best-practices-for-authenticating-api-requests-from-domains-you-dont-control/19648 "2019-01-11T14:47:42Z")
I’m trying to figure out best practices for authenticating API requests from domains that I don’t control, and I’d appreciate some guidance. My setup: We have a web app that uses Auth0 for IAM. The web app exposes an AP… --- ## [Authorization extension api documentation bug](https://community.auth0.com/t/authorization-extension-api-documentation-bug/16361)
**Author:** [@joost](https://community.auth0.com/u/joost)\ **Replies:** 2\ **Last updated:** [October 30, 2018, 11:34am UTC](https://community.auth0.com/t/authorization-extension-api-documentation-bug/16361 "2018-10-30T11:34:15Z")
Hi there, I was working with the authorization extension API in particular adding and removing users from roles. Here I found a small fault in the documentation for removing a user from roles. The URL mentioned in the … --- ## [Google Sign-in Form: Can I replace the text "auth0" with our company/app name?](https://community.auth0.com/t/google-sign-in-form-can-i-replace-the-text-auth0-with-our-company-app-name/7407)
**Author:** [@partners](https://community.auth0.com/u/partners)\ **Replies:** 2\ **Last updated:** [September 20, 2018, 7:46pm UTC](https://community.auth0.com/t/google-sign-in-form-can-i-replace-the-text-auth0-with-our-company-app-name/7407 "2018-09-20T19:46:16Z")
We are using the Auth0 api’s (not Lock) to provide Facebook and Google logins. Facebook allows us to add our app name on the Facebook login. Google does not appear to be customizable. Instead, we see the text “Continue t… --- ## [Auth0 Application API Quckstart Doesn't Work - Missing Scopes](https://community.auth0.com/t/auth0-application-api-quckstart-doesnt-work-missing-scopes/11205)
**Author:** [@gtb](https://community.auth0.com/u/gtb)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 6:06pm UTC](https://community.auth0.com/t/auth0-application-api-quckstart-doesnt-work-missing-scopes/11205 "2018-12-18T18:06:20Z")
Hi, I’ve got the authentication quick start working for my React SPA and that all works fine. The next step is securing my web api layer. I download the API quickstart, which comes with my details pre-loaded e.g. audie… --- ## [Restrict first-party clients to specific APIs](https://community.auth0.com/t/restrict-first-party-clients-to-specific-apis/9395)
**Author:** [@ryan.boyd](https://community.auth0.com/u/ryan.boyd)\ **Replies:** 1\ **Last updated:** [April 4, 2018, 7:55am UTC](https://community.auth0.com/t/restrict-first-party-clients-to-specific-apis/9395 "2018-04-04T07:55:34Z")
Scenario: Multiple first-party clients are configured with different valid callback URLs. Say FP-Client-A, FP-Client-B, FP-Client-C, each with a different set of callback URLs. We have multiple APIs. Say, API-X, API-Y,… --- ## [Opaque token returned for hosted lock with audience param](https://community.auth0.com/t/opaque-token-returned-for-hosted-lock-with-audience-param/9521)
**Author:** [@Mark06](https://community.auth0.com/u/Mark06)\ **Replies:** 2\ **Last updated:** [February 16, 2018, 7:08pm UTC](https://community.auth0.com/t/opaque-token-returned-for-hosted-lock-with-audience-param/9521 "2018-02-16T19:08:27Z")
Hi, I’m having trouble getting an access\_token for my API using the hosted Lock. I’ve specified the audience as follows: var lock = new Auth0Lock(config.clientID, config.auth0Domain, { auth: { redirectUrl: config… --- ## [API authorization for dynamic path parameters in the routes](https://community.auth0.com/t/api-authorization-for-dynamic-path-parameters-in-the-routes/9490)
**Author:** [@ramkrishna001](https://community.auth0.com/u/ramkrishna001)\ **Replies:** 1\ **Last updated:** [December 17, 2018, 3:32pm UTC](https://community.auth0.com/t/api-authorization-for-dynamic-path-parameters-in-the-routes/9490 "2018-12-17T15:32:20Z")
Hello, I am trying to build a Client(react.js) - API(flask) with auth0. Now the routes for POST and GET that go to flask look something like this http://localhost:8080/clientid/{id}/action . The id part of the route (i… --- ## [Choice of authentication flow](https://community.auth0.com/t/choice-of-authentication-flow/9040)
**Author:** [@priya.sharma.9362](https://community.auth0.com/u/priya.sharma.9362)\ **Replies:** 4\ **Last updated:** [December 21, 2017, 9:25pm UTC](https://community.auth0.com/t/choice-of-authentication-flow/9040 "2017-12-21T21:25:55Z")
We want to establish a secure authentication flow for between our API and client applications. For this, we are thinking of using the resource owner password grant, wherein each user will provide their email and passwor… --- ## [API calling return 401 when using access token return by Auth0.webAuth() login](https://community.auth0.com/t/api-calling-return-401-when-using-access-token-return-by-auth0-webauth-login/8904)
**Author:** [@haoyuant94718](https://community.auth0.com/u/haoyuant94718)\ **Replies:** 1\ **Last updated:** [December 7, 2017, 5:40pm UTC](https://community.auth0.com/t/api-calling-return-401-when-using-access-token-return-by-auth0-webauth-login/8904 "2017-12-07T17:40:22Z")
I follow the iOS quick start step by step to set up my app, and follow the quick start in the APIs section to create an API and set up my server. Then I try to follow this tutorial (https://auth0.com/docs/quickstart/nati… --- ## [OnAuthorization doesnt have claims](https://community.auth0.com/t/onauthorization-doesnt-have-claims/8753)
**Author:** [@afleveri](https://community.auth0.com/u/afleveri)\ **Replies:** 0\ **Last updated:** [November 15, 2017, 5:43pm UTC](https://community.auth0.com/t/onauthorization-doesnt-have-claims/8753 "2017-11-15T17:43:49Z")
Hi, When I get my token with scopes, method OnAuthorization doesnt receive the token with scopee, What am I doing wrong? : public override void OnAuthorization(HttpActionContext actionContext) { bas… --- ## [Auth0 API authorization with Google App Engine](https://community.auth0.com/t/auth0-api-authorization-with-google-app-engine/8702)
**Author:** [@ericaddison](https://community.auth0.com/u/ericaddison)\ **Replies:** 3\ **Last updated:** [November 10, 2017, 8:46pm UTC](https://community.auth0.com/t/auth0-api-authorization-with-google-app-engine/8702 "2017-11-10T20:46:28Z")
tl;dr What is the best way to decode an API access\_token from Auth0 using Google App Engine/python/webapp2 as a backend stack? I am inexperienced in the ways of authentication, authorization, and cryptography, so plea… --- ## [Need some clarifications about API Authorization from an SPA](https://community.auth0.com/t/need-some-clarifications-about-api-authorization-from-an-spa/8676)
**Author:** [@fmeriot](https://community.auth0.com/u/fmeriot)\ **Replies:** 0\ **Last updated:** [November 6, 2017, 5:19pm UTC](https://community.auth0.com/t/need-some-clarifications-about-api-authorization-from-an-spa/8676 "2017-11-06T17:19:19Z")
Hello, I need some clarifications about API authorization from an SPA. In the doc I noticed this paragraph about how to determine a user’s scope Determine a User’s Scopes You can use scopes to make decisions about th… --- ## [Adfs login error from server side](https://community.auth0.com/t/adfs-login-error-from-server-side/8596)
**Author:** [@satinder.kaur](https://community.auth0.com/u/satinder.kaur)\ **Replies:** 0\ **Last updated:** [October 26, 2017, 9:19pm UTC](https://community.auth0.com/t/adfs-login-error-from-server-side/8596 "2017-10-26T21:19:04Z")
I was trying to login with adfs from server side (c#) on https://oneclick.au.auth0.com/oauth/token, but i am getting error “getaddrinfo ENOTFOUND win-s9jsjqo9n0g.matrix.loc win-s9jsjqo9n0g.matrix.loc:443”. i have config… --- ## [How to login adfs using API](https://community.auth0.com/t/how-to-login-adfs-using-api/8595)
**Author:** [@satinder.kaur](https://community.auth0.com/u/satinder.kaur)\ **Replies:** 0\ **Last updated:** [October 26, 2017, 8:21pm UTC](https://community.auth0.com/t/how-to-login-adfs-using-api/8595 "2017-10-26T20:21:49Z")
I am trying to login to adfs using auth0 api . my api url is - https://oneclick.au.auth0.com/oauth/token and the data i am sending is { “grant\_type”:“http://auth0.com/oauth/grant-type/password-realm”, “realm”:“Use… --- ## [Invalid API access token for LinkedIn connection](https://community.auth0.com/t/invalid-api-access-token-for-linkedin-connection/8561)
**Author:** [@rhishikeshj](https://community.auth0.com/u/rhishikeshj)\ **Replies:** 0\ **Last updated:** [October 24, 2017, 4:07pm UTC](https://community.auth0.com/t/invalid-api-access-token-for-linkedin-connection/8561 "2017-10-24T16:07:47Z")
Hi I am trying to get an access token for doing authenticated LinkedIn API calls such as ones here : https://developer.linkedin.com/docs/oauth2 What I am doing is : Auth0 .webAuth() .s… [Next page](https://community.auth0.com/tag/api-authorization/392.md?match_all_tags=true&page=1&tags%5B%5D=api-authorization)