# \#grants **URL:** https://community.auth0.com/tag/grants/378.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Unable to use Password Realm Grant Type despite having Essentials Plan with Home Realm Discovery](https://community.auth0.com/t/unable-to-use-password-realm-grant-type-despite-having-essentials-plan-with-home-realm-discovery/190026)
**Author:** [@EBA](https://community.auth0.com/u/EBA)\ **Replies:** 2\ **Last updated:** [August 5, 2025, 8:31am UTC](https://community.auth0.com/t/unable-to-use-password-realm-grant-type-despite-having-essentials-plan-with-home-realm-discovery/190026 "2025-08-05T08:31:22Z")
Hello, I’m trying to implement the Resource Owner Password Flow with realm support for my application, but I’m encountering issues with the password-realm grant type. My setup: Plan: B2B Essentials (includes Home Rea… --- ## [Custom claim not showing in JWT access token](https://community.auth0.com/t/custom-claim-not-showing-in-jwt-access-token/187751)
**Author:** [@matteo1](https://community.auth0.com/u/matteo1)\ **Replies:** 4\ **Last updated:** [June 11, 2025, 2:38pm UTC](https://community.auth0.com/t/custom-claim-not-showing-in-jwt-access-token/187751 "2025-06-11T14:38:47Z")
I have a post login action that adds a custom claim to my JWT access token as suggested in the create custom claim docs. This is my postlogin action: exports.onExecutePostLogin = async (event, api) =\> { api.accessToke… --- ## [Changing User Password with Resource Owner Password Flow – Is It Safe or Should?](https://community.auth0.com/t/changing-user-password-with-resource-owner-password-flow-is-it-safe-or-should/185478)
**Author:** [@ines.s](https://community.auth0.com/u/ines.s)\ **Replies:** 2\ **Last updated:** [April 15, 2025, 11:44pm UTC](https://community.auth0.com/t/changing-user-password-with-resource-owner-password-flow-is-it-safe-or-should/185478 "2025-04-15T23:44:30Z")
Hi everyone, I’m building a flow in my app where authenticated users can change their password directly from the UI without needing to go through an email link. Setup & Goal My users are in a “Username-Password-Authen… --- ## [Issues with Access Token for Management API in C#](https://community.auth0.com/t/issues-with-access-token-for-management-api-in-c/183150)
**Author:** [@AnnaSasDev](https://community.auth0.com/u/AnnaSasDev)\ **Replies:** 2\ **Last updated:** [March 3, 2025, 7:02pm UTC](https://community.auth0.com/t/issues-with-access-token-for-management-api-in-c/183150 "2025-03-03T19:02:59Z")
Hey there, I’m quite new to using Auth0, so sorry in advance if I misunderstood something in the documentation. I’m building a small library to manage roles and permissions for my application through a secure backend. … --- ## [Invalid access token returned when using authorication\_code grant with the management api](https://community.auth0.com/t/invalid-access-token-returned-when-using-authorication-code-grant-with-the-management-api/176230)
**Author:** [@domas](https://community.auth0.com/u/domas)\ **Replies:** 5\ **Last updated:** [February 5, 2025, 9:34pm UTC](https://community.auth0.com/t/invalid-access-token-returned-when-using-authorication-code-grant-with-the-management-api/176230 "2025-02-05T21:34:30Z")
I am trying to use the authorization code flow with an app authorized with the management API. For testing purposes I am doing this using curl and my web browser. Firsly, I visit the browser using the following URL cons… --- ## [Redirection is not available on /oauth/token endpoint](https://community.auth0.com/t/redirection-is-not-available-on-oauth-token-endpoint/100652)
**Author:** [@fernandat](https://community.auth0.com/u/fernandat)\ **Replies:** 6\ **Last updated:** [November 23, 2024, 2:36am UTC](https://community.auth0.com/t/redirection-is-not-available-on-oauth-token-endpoint/100652 "2024-11-23T02:36:25Z")
Hello. Currently, I’m working with a process to linking accounts from different providers, but in some part of the process, It’s fetching POST to https://{yourDomain}/oauth/token to refresh token and It’s retrieven me 4… --- ## [Server\_error When Requesting Access Token in Client Credentials Flow](https://community.auth0.com/t/server-error-when-requesting-access-token-in-client-credentials-flow/147789)
**Author:** [@reza1](https://community.auth0.com/u/reza1)\ **Replies:** 1\ **Last updated:** [October 2, 2024, 5:23pm UTC](https://community.auth0.com/t/server-error-when-requesting-access-token-in-client-credentials-flow/147789 "2024-10-02T17:23:14Z")
Hi I am encountering an issue while trying to request an access token using the Client Credentials grant type for my custom API. The request is failing with a server\_error, and the response indicates an internal problem… --- ## [API authentication using Auth code flow](https://community.auth0.com/t/api-authentication-using-auth-code-flow/134285)
**Author:** [@roy.manotosh](https://community.auth0.com/u/roy.manotosh)\ **Replies:** 3\ **Last updated:** [May 17, 2024, 4:00pm UTC](https://community.auth0.com/t/api-authentication-using-auth-code-flow/134285 "2024-05-17T16:00:40Z")
I am trying to authenticate an API using Auth code flow. I have followed the Hello World React Example along with Hello World Node Express API. The React APP user authentication is working correctly, but when I try to in… --- ## [Getting error for oauth/token. Grant type 'client\_credentials' not allowed for the client](https://community.auth0.com/t/getting-error-for-oauth-token-grant-type-client-credentials-not-allowed-for-the-client/123797)
**Author:** [@pythonsweng](https://community.auth0.com/u/pythonsweng)\ **Replies:** 1\ **Last updated:** [January 6, 2024, 12:24am UTC](https://community.auth0.com/t/getting-error-for-oauth-token-grant-type-client-credentials-not-allowed-for-the-client/123797 "2024-01-06T00:24:49Z")
I have create regular web application and I want to get the oAuth token from outh/token, for that purpose I have M2M app. and want to use that token in api/v2/users API. manuall token is working fine for api/v2/users AP… --- ## [401 error (Unauthorized) on Bubble](https://community.auth0.com/t/401-error-unauthorized-on-bubble/114107)
**Author:** [@theodore](https://community.auth0.com/u/theodore)\ **Replies:** 7\ **Last updated:** [August 31, 2023, 4:55pm UTC](https://community.auth0.com/t/401-error-unauthorized-on-bubble/114107 "2023-08-31T16:55:05Z")
Hi! I’ve successfully integrated Auth0 with Bubble and the Auth0 login screen is up and running. Now, I’m aiming to add buttons on my app (Google and LinkedIn) to enable users to easily log in or sign up using these si… --- ## [Terraform: auth0\_client\_grant](https://community.auth0.com/t/terraform-auth0-client-grant/115110)
**Author:** [@andrew.trigg](https://community.auth0.com/u/andrew.trigg)\ **Replies:** 2\ **Last updated:** [August 31, 2023, 12:44pm UTC](https://community.auth0.com/t/terraform-auth0-client-grant/115110 "2023-08-31T12:44:07Z")
Hello, I’m trying to find where the client grant ID is. I’m importing a auth0\_client\_grant resource using terraform, and the instructions tell me to use the client grant ID, beginning with a cgr\_ prefix. You can see the… --- ## [Permissions (Scopes)](https://community.auth0.com/t/permissions-scopes/106645)
**Author:** [@dotaolaoqua](https://community.auth0.com/u/dotaolaoqua)\ **Replies:** 1\ **Last updated:** [May 10, 2023, 8:03pm UTC](https://community.auth0.com/t/permissions-scopes/106645 "2023-05-10T20:03:30Z")
Hi, I need help. Which permissions (scopes) do I need if I want to do the following? Write in the local SQL server database Get the username (ex.: HttpContext.User.Identity.Name) Thank you! --- ## [How do i control the access to api management in Auth0 according to user previleges?](https://community.auth0.com/t/how-do-i-control-the-access-to-api-management-in-auth0-according-to-user-previleges/106241)
**Author:** [@kkhanal](https://community.auth0.com/u/kkhanal)\ **Replies:** 1\ **Last updated:** [May 5, 2023, 10:59pm UTC](https://community.auth0.com/t/how-do-i-control-the-access-to-api-management-in-auth0-according-to-user-previleges/106241 "2023-05-05T22:59:09Z")
I am developing my own portal for user management. How do i restrict the user with less privelege (custom scope) to modify another user’s profile who has high privilege (custom scope). --- ## [Auth0 token flows without a client](https://community.auth0.com/t/auth0-token-flows-without-a-client/104873)
**Author:** [@liam2](https://community.auth0.com/u/liam2)\ **Replies:** 3\ **Last updated:** [April 29, 2023, 12:02am UTC](https://community.auth0.com/t/auth0-token-flows-without-a-client/104873 "2023-04-29T00:02:58Z")
I am lost every time I read any of the documentation on receiving tokens or interacting with auth0 apis if you are not in a client using callback urls. Call Your API Using the Authorization Code Flow Is there a way to d… --- ## [Where to find M2M usage?](https://community.auth0.com/t/where-to-find-m2m-usage/105576)
**Author:** [@filip.vuletic](https://community.auth0.com/u/filip.vuletic)\ **Replies:** 1\ **Last updated:** [April 26, 2023, 6:03pm UTC](https://community.auth0.com/t/where-to-find-m2m-usage/105576 "2023-04-26T18:03:17Z")
Hello, I have been searching deep and wide, and I am unable to find current or past M2M quota usage. All posts are old, some are referencing “Usage” in dashboard. Usage does not exist anymore. Some are referencing M2M… --- ## [Facing issues in getting token via authorization code](https://community.auth0.com/t/facing-issues-in-getting-token-via-authorization-code/103995)
**Author:** [@surya.chandrasekhara](https://community.auth0.com/u/surya.chandrasekhara)\ **Replies:** 1\ **Last updated:** [April 4, 2023, 6:32pm UTC](https://community.auth0.com/t/facing-issues-in-getting-token-via-authorization-code/103995 "2023-04-04T18:32:00Z")
Hi Team, Im facing an issue in having an access tokens. I was able to make authorize call successfully and got the code. With the same I’m trying to get the token, it is giving CORS error. Im new to OKTA, any help wi… --- ## [Oauth/token endpoint payload](https://community.auth0.com/t/oauth-token-endpoint-payload/103903)
**Author:** [@pablo.didone](https://community.auth0.com/u/pablo.didone)\ **Replies:** 1\ **Last updated:** [April 4, 2023, 6:15pm UTC](https://community.auth0.com/t/oauth-token-endpoint-payload/103903 "2023-04-04T18:15:24Z")
I have a Flutter app that logs in user by sending a validation code by sms. To validate that code I hit oauth/token endpoint. This endpoint returns a payload that contains the name property but it is empty. How can I con… --- ## [Scopes read:current\_user update:current\_user\_identities not granted](https://community.auth0.com/t/scopes-read-current-user-update-current-user-identities-not-granted/104098)
**Author:** [@rafael.rodriguez](https://community.auth0.com/u/rafael.rodriguez)\ **Replies:** 1\ **Last updated:** [April 4, 2023, 4:16pm UTC](https://community.auth0.com/t/scopes-read-current-user-update-current-user-identities-not-granted/104098 "2023-04-04T16:16:43Z")
I am using react native and specifying the scopes in the authorize call like this: await authorize({ ... scope: 'openid profile email offline\_access read:current\_user update:current\_user\_identities' … --- ## [Unable to call my API with Authorization method. (problems with Access Token)](https://community.auth0.com/t/unable-to-call-my-api-with-authorization-method-problems-with-access-token/97814)
**Author:** [@Totodile](https://community.auth0.com/u/Totodile)\ **Replies:** 3\ **Last updated:** [January 13, 2023, 12:22am UTC](https://community.auth0.com/t/unable-to-call-my-api-with-authorization-method-problems-with-access-token/97814 "2023-01-13T00:22:27Z")
Hello everyone. I’m having problems trying to access endpoints that requires authorization and don’t really know how to solve it… Here is the thing: I’ve an Angular APP which implements Auth0/Angular library. In Auth0… --- ## [Unable to add custom claim to access token using custom action](https://community.auth0.com/t/unable-to-add-custom-claim-to-access-token-using-custom-action/97284)
**Author:** [@benmsullivan](https://community.auth0.com/u/benmsullivan)\ **Replies:** 7\ **Last updated:** [January 1, 2023, 1:08pm UTC](https://community.auth0.com/t/unable-to-add-custom-claim-to-access-token-using-custom-action/97284 "2023-01-01T13:08:44Z")
Hi I am trying to add a custom claim to my access tokens using a custom action: exports.onExecutePostLogin = async (event, api) =\> { // This adds the authenticated user's email address to the access token. if (even… --- ## [When I call the api "/oauth/token" to refresh token,it responses 500!Why?Help!](https://community.auth0.com/t/when-i-call-the-api-oauth-token-to-refresh-token-it-responses-500-why-help/96597)
**Author:** [@shengnan.qiu](https://community.auth0.com/u/shengnan.qiu)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 3:28pm UTC](https://community.auth0.com/t/when-i-call-the-api-oauth-token-to-refresh-token-it-responses-500-why-help/96597 "2022-12-20T15:28:10Z")
\#auth0 #refresh token --- ## [Give all permissions to a M2M app on Auth0 Management API](https://community.auth0.com/t/give-all-permissions-to-a-m2m-app-on-auth0-management-api/92740)
**Author:** [@rivindu](https://community.auth0.com/u/rivindu)\ **Replies:** 3\ **Last updated:** [October 21, 2022, 9:08pm UTC](https://community.auth0.com/t/give-all-permissions-to-a-m2m-app-on-auth0-management-api/92740 "2022-10-21T21:08:08Z")
Hi, I want to know if there is a way to give all permissions to a m2m app for management API when provisioning a client grant in terraform data "auth0\_tenant" "yl\_test\_dev" {} resource "auth0\_client\_grant" "m2m\_client… --- ## [Can I export grants of Auth0 Management API using cli?](https://community.auth0.com/t/can-i-export-grants-of-auth0-management-api-using-cli/67691)
**Author:** [@Yas](https://community.auth0.com/u/Yas)\ **Replies:** 3\ **Last updated:** [August 23, 2021, 8:06am UTC](https://community.auth0.com/t/can-i-export-grants-of-auth0-management-api-using-cli/67691 "2021-08-23T08:06:10Z")
I configured the Deploy CLI Application based on the official document as below. then, I want to export this configuration, especially so many permissions, in my local and then I want to import to the other Auth0 tenan… --- ## [Username/password login for SPA suddenly not working](https://community.auth0.com/t/username-password-login-for-spa-suddenly-not-working/7562)
**Author:** [@macecilia\_santillan](https://community.auth0.com/u/macecilia_santillan)\ **Replies:** 2\ **Last updated:** [July 19, 2017, 11:49am UTC](https://community.auth0.com/t/username-password-login-for-spa-suddenly-not-working/7562 "2017-07-19T11:49:47Z")
Our client was working just fine until yesterday; when I tried to login via username/password, it had this error: Error: Grant type 'http://auth0.com/oauth/grant-type/password-realm' not allowed for the client. The cod… --- ## [We've had to add some legacy client grants to an old client manually, they keep getting erased](https://community.auth0.com/t/weve-had-to-add-some-legacy-client-grants-to-an-old-client-manually-they-keep-getting-erased/7207)
**Author:** [@ltiessen](https://community.auth0.com/u/ltiessen)\ **Replies:** 1\ **Last updated:** [June 23, 2017, 8:20pm UTC](https://community.auth0.com/t/weve-had-to-add-some-legacy-client-grants-to-an-old-client-manually-they-keep-getting-erased/7207 "2017-06-23T20:20:47Z")
We encountered the same issue as was answered in this question: http://community.auth0.com/questions/3944/error-grant-type-password-not-allowed-for-the-clie Using the management API we can set the grants to what we wan… --- ## [Editing UI callback urls resets grants](https://community.auth0.com/t/editing-ui-callback-urls-resets-grants/7194)
**Author:** [@soconnor](https://community.auth0.com/u/soconnor)\ **Replies:** 2\ **Last updated:** [June 22, 2017, 9:53am UTC](https://community.auth0.com/t/editing-ui-callback-urls-resets-grants/7194 "2017-06-22T09:53:57Z")
There appears to be a bug when using the UI in the dashboard to edit the list of allowable callback uri’s. When the list is altered and then saved, the grants for the clients resets. We had manually added the ‘password’… --- ## [What is future of the implicit grant?](https://community.auth0.com/t/what-is-future-of-the-implicit-grant/6884)
**Author:** [@aalderman](https://community.auth0.com/u/aalderman)\ **Replies:** 1\ **Last updated:** [June 5, 2017, 6:02pm UTC](https://community.auth0.com/t/what-is-future-of-the-implicit-grant/6884 "2017-06-05T18:02:19Z")
I’ve read several places (such as, for example, here: OAuth 2 Simplified • Aaron Parecki ) that the implicit grant is no longer recommended for SPAs and mobile apps. Rather, the authorization code flow should be used …