# \#resource-owner-passw

**URL:** https://community.auth0.com/tag/resource-owner-passw/607.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [Resource Owner Password flow responds with 500](https://community.auth0.com/t/resource-owner-password-flow-responds-with-500/86773)

<div class="topic-metadata">

**Author:** [@michael-bamboo](https://community.auth0.com/u/michael-bamboo)\
**Replies:** 1\
**Last updated:** [July 11, 2022, 7:48pm UTC](https://community.auth0.com/t/resource-owner-password-flow-responds-with-500/86773 "2022-07-11T19:48:15Z")

</div>

Problem I’m trying to get an access token for a given user via Resource Owner Password flow, but my request to https://MY-APPS-DOMAIN/oauth/token keeps failing with a generic 500 status code. Rough Setup Application (“…

---

## [Is registering Users and getting user meta through Management API a bad practice?](https://community.auth0.com/t/is-registering-users-and-getting-user-meta-through-management-api-a-bad-practice/68672)

<div class="topic-metadata">

**Author:** [@assadullahch](https://community.auth0.com/u/assadullahch)\
**Replies:** 3\
**Last updated:** [August 30, 2021, 8:41pm UTC](https://community.auth0.com/t/is-registering-users-and-getting-user-meta-through-management-api-a-bad-practice/68672 "2021-08-30T20:41:59Z")

</div>

Hi, We are building a MERN stack single page app. We got the following use cases Registering users on our website without redirecting them to Auth0 hosted registration page and we are using Management API on our bac…

---

## [Resource Owner Password authentication failure](https://community.auth0.com/t/resource-owner-password-authentication-failure/67218)

<div class="topic-metadata">

**Author:** [@abelose90](https://community.auth0.com/u/abelose90)\
**Replies:** 4\
**Last updated:** [August 4, 2021, 3:42pm UTC](https://community.auth0.com/t/resource-owner-password-authentication-failure/67218 "2021-08-04T15:42:43Z")

</div>

Current setup: Created a SPA, added a rule to add roles of the logged in user. This role is checked while accessing the apis. Added grant type password. My usecase: I am trying to run postman tests. For testing apis I n…

---

## [Mirating mobile clients to auth0 and avoiding re-login](https://community.auth0.com/t/mirating-mobile-clients-to-auth0-and-avoiding-re-login/39465)

<div class="topic-metadata">

**Author:** [@thomasliasn](https://community.auth0.com/u/thomasliasn)\
**Replies:** 0\
**Last updated:** [March 16, 2020, 9:43am UTC](https://community.auth0.com/t/mirating-mobile-clients-to-auth0-and-avoiding-re-login/39465 "2020-03-16T09:43:04Z")

</div>

In order to migrate to auth0 without requiring our users to re-login, we’re looking for some way to convert an existing legacy authentication server access token to auth0 access/refresh token. Basically, on startup the a…

---

## [Code sample project for implementing the Resource Owner Password Grant using .NET Core](https://community.auth0.com/t/code-sample-project-for-implementing-the-resource-owner-password-grant-using-net-core/21099)

<div class="topic-metadata">

**Author:** [@PingPongSet](https://community.auth0.com/u/PingPongSet)\
**Replies:** 1\
**Last updated:** [February 16, 2019, 10:01pm UTC](https://community.auth0.com/t/code-sample-project-for-implementing-the-resource-owner-password-grant-using-net-core/21099 "2019-02-16T22:01:08Z")

</div>

Hi, I am looking for code sample project for implementing the Resource Owner Password Grant using .NET Core, which can be downloaded and ran locally straight away. The link below contains only C# code snippet, https:/…

---

## [JWT access token invalid](https://community.auth0.com/t/jwt-access-token-invalid/9339)

<div class="topic-metadata">

**Author:** [@muneebamughal](https://community.auth0.com/u/muneebamughal)\
**Replies:** 1\
**Last updated:** [February 5, 2018, 2:20pm UTC](https://community.auth0.com/t/jwt-access-token-invalid/9339 "2018-02-05T14:20:02Z")

</div>

I am integrating Auth0 with my backend application as an authorisation service. I have created an access token via endpoint oauth/token with client credentials and user’s email and password. Access token generated is ve…

---

## [Device name for Resource Owner Password flow (Java)](https://community.auth0.com/t/device-name-for-resource-owner-password-flow-java/7853)

<div class="topic-metadata">

**Author:** [@AndreasJScholz](https://community.auth0.com/u/AndreasJScholz)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 7:38pm UTC](https://community.auth0.com/t/device-name-for-resource-owner-password-flow-java/7853 "2017-12-13T19:38:52Z")

</div>

I am using the auth0-java library and want to generate refresh tokens using the offline\_access scope If authentication succeeds the token will show in the dashboard user → devices tab correctly (counter will increment) …

---

## [PhoneGap Custom UI Auth0 login Issue](https://community.auth0.com/t/phonegap-custom-ui-auth0-login-issue/8527)

<div class="topic-metadata">

**Author:** [@aravind.somashekar](https://community.auth0.com/u/aravind.somashekar)\
**Replies:** 3\
**Last updated:** [October 24, 2017, 8:38pm UTC](https://community.auth0.com/t/phonegap-custom-ui-auth0-login-issue/8527 "2017-10-24T20:38:50Z")

</div>

We are trying to implement Auth0 login using Custom UI in our PhoneGap application. We are observing the below issue: With new accounts we see that the API oauth/ro is deprecated With Old accounts, we are receiving 40…

---

## [Non interactive client / Resource Owner Password / Refresh Token](https://community.auth0.com/t/non-interactive-client-resource-owner-password-refresh-token/8285)

<div class="topic-metadata">

**Author:** [@dslee](https://community.auth0.com/u/dslee)\
**Replies:** 1\
**Last updated:** [September 25, 2017, 4:12am UTC](https://community.auth0.com/t/non-interactive-client-resource-owner-password-refresh-token/8285 "2017-09-25T04:12:31Z")

</div>

I am expecting a refresh\_token for the following request. The refresh\_token is not in the response. What am I doing wrong? REQUEST: { "grant\_type": "http://auth0.com/oauth/grant-type/password-realm", "username": "bl…

---

## [How to enroll Google Authenticator by using Resource Owner Password Endpoint](https://community.auth0.com/t/how-to-enroll-google-authenticator-by-using-resource-owner-password-endpoint/8241)

<div class="topic-metadata">

**Author:** [@ha.nguyendinh04](https://community.auth0.com/u/ha.nguyendinh04)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 11:34am UTC](https://community.auth0.com/t/how-to-enroll-google-authenticator-by-using-resource-owner-password-endpoint/8241 "2017-09-19T11:34:14Z")

</div>

Hi, I’m using Resource Owner Password Endpoint (/oauth/token) to log the user in my SPA. I also enabled MFA Google Authenticator. When a user enters their credentials into my login form, the token endpoint response an e…

---

## [Resource Owner with Google Apps](https://community.auth0.com/t/resource-owner-with-google-apps/7160)

<div class="topic-metadata">

**Author:** [@felipecarasso](https://community.auth0.com/u/felipecarasso)\
**Replies:** 4\
**Last updated:** [June 22, 2017, 7:42pm UTC](https://community.auth0.com/t/resource-owner-with-google-apps/7160 "2017-06-22T19:42:56Z")

</div>

Our Web app includes a feature called privilege escalation where a user may remain online but will require to confirm his password for certain sensitive operations. I was trying to use the Resource Owner flow to provide…

---

## [Retrieving Authorization extension permissions from the ID token via the /oauth/token endpoint](https://community.auth0.com/t/retrieving-authorization-extension-permissions-from-the-id-token-via-the-oauth-token-endpoint/6984)

<div class="topic-metadata">

**Author:** [@lucas.martin](https://community.auth0.com/u/lucas.martin)\
**Replies:** 2\
**Last updated:** [June 9, 2017, 7:32pm UTC](https://community.auth0.com/t/retrieving-authorization-extension-permissions-from-the-id-token-via-the-oauth-token-endpoint/6984 "2017-06-09T19:32:19Z")

</div>

I’ve been having a hell of a time trying to get permissions to appear in the ID token of the response that comes back from the /oauth/token endpoint when using Resource Owner Password flow. From what I understand, if yo…

---

## [Resource Owner grants disabled for new clients without notice?](https://community.auth0.com/t/resource-owner-grants-disabled-for-new-clients-without-notice/6966)

<div class="topic-metadata">

**Author:** [@ben1](https://community.auth0.com/u/ben1)\
**Replies:** 3\
**Last updated:** [June 8, 2017, 11:02pm UTC](https://community.auth0.com/t/resource-owner-grants-disabled-for-new-clients-without-notice/6966 "2017-06-08T23:02:52Z")

</div>

I know that /oauth/ro has been deprecated for a while, but we haven’t yet updated to use /oauth/token. It appears that without any communication (as far as i can tell?) legacy access was recently completely disabled from…
