# \#tokens **URL:** https://community.auth0.com/tag/tokens/268.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Obtaining an AWS Tokens to securely call AWS APIs and resources - Delegation no longer working?](https://community.auth0.com/t/obtaining-an-aws-tokens-to-securely-call-aws-apis-and-resources-delegation-no-longer-working/7248)
**Author:** [@venn.hardy](https://community.auth0.com/u/venn.hardy)\ **Replies:** 7\ **Last updated:** [March 1, 2018, 10:05pm UTC](https://community.auth0.com/t/obtaining-an-aws-tokens-to-securely-call-aws-apis-and-resources-delegation-no-longer-working/7248 "2018-03-01T22:05:00Z")
Hi everyone, I’m very new to auth0 (actually stumbled across it today while reading a really good tutorial from auth0 about how to create some AWS lambda functions, then call them from a client angularJS app, with all o… --- ## [Forwarding identity\_token to resource server](https://community.auth0.com/t/forwarding-identity-token-to-resource-server/9382)
**Author:** [@emanuel.williams](https://community.auth0.com/u/emanuel.williams)\ **Replies:** 1\ **Last updated:** [December 17, 2018, 3:10pm UTC](https://community.auth0.com/t/forwarding-identity-token-to-resource-server/9382 "2018-12-17T15:10:09Z")
Its pretty clear that access\_tokens are for API’s to verify authorization to specific endpoints on a resource and that identity\_tokens are for clients only. In our case we have an API (resource) and a front end client a… --- ## [How does a SAML token look like? How to add some information to it?](https://community.auth0.com/t/how-does-a-saml-token-look-like-how-to-add-some-information-to-it/9281)
**Author:** [@manuelgr77](https://community.auth0.com/u/manuelgr77)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 6:11pm UTC](https://community.auth0.com/t/how-does-a-saml-token-look-like-how-to-add-some-information-to-it/9281 "2018-12-14T18:11:14Z")
Hi guys In the project I’m currently working on we are developing a web application which uses Auth0 to authenticate its users. We want to add a external Identity Provider to authenticate users with Auth0 operating as a… --- ## [Webtask credentials for deployment pipeline](https://community.auth0.com/t/webtask-credentials-for-deployment-pipeline/8981)
**Author:** [@jerome.paul](https://community.auth0.com/u/jerome.paul)\ **Replies:** 1\ **Last updated:** [December 14, 2017, 7:54pm UTC](https://community.auth0.com/t/webtask-credentials-for-deployment-pipeline/8981 "2017-12-14T19:54:00Z")
We prefer having an automated process to deploy anything. I’ve been looking at options to deploy an Auth0 Hook from my build pipeline. The Tenant settings show a way to initialise the wt-cli (https://manage.auth0.com/#/… --- ## [Renew token issue](https://community.auth0.com/t/renew-token-issue/8839)
**Author:** [@damianmazurto](https://community.auth0.com/u/damianmazurto)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 7:30pm UTC](https://community.auth0.com/t/renew-token-issue/8839 "2017-11-28T19:30:49Z")
I have really problem with token renew in my Angular4 spa. Following this tutorial https://auth0.com/docs/quickstart/spa/angular2/05-token-renewal I got login\_required or contest error. Below my renewToken method: publi… --- ## [Do I need to store IDP access\_token + refresh\_token on my own, or I can use Auth0?](https://community.auth0.com/t/do-i-need-to-store-idp-access-token-refresh-token-on-my-own-or-i-can-use-auth0/8801)
**Author:** [@m.bellino](https://community.auth0.com/u/m.bellino)\ **Replies:** 1\ **Last updated:** [November 22, 2017, 7:27pm UTC](https://community.auth0.com/t/do-i-need-to-store-idp-access-token-refresh-token-on-my-own-or-i-can-use-auth0/8801 "2017-11-22T19:27:44Z")
After I successfully authenticate on an external IDP, I can use the Management API to retrieve the IDP access\_token and refresh\_token. Using the IDP access\_token I’ll be able to call the services provided by the IDP. A… --- ## [Can I do an authorization code grant flow in Laravel?](https://community.auth0.com/t/can-i-do-an-authorization-code-grant-flow-in-laravel/8610)
**Author:** [@emcintyre.idt911](https://community.auth0.com/u/emcintyre.idt911)\ **Replies:** 0\ **Last updated:** [October 28, 2017, 12:46pm UTC](https://community.auth0.com/t/can-i-do-an-authorization-code-grant-flow-in-laravel/8610 "2017-10-28T12:46:11Z")
I’m building a prototype to simulate what it would look like to convert a couple of our applications to using Auth0, so we can take advantage of single sign-on. I was able to get a Spring Boot API integrated and secured … --- ## [How to refresh tokens in JS web app, when not using Hosted Login Page?](https://community.auth0.com/t/how-to-refresh-tokens-in-js-web-app-when-not-using-hosted-login-page/8504)
**Author:** [@jacek.marek](https://community.auth0.com/u/jacek.marek)\ **Replies:** 1\ **Last updated:** [October 18, 2017, 4:23pm UTC](https://community.auth0.com/t/how-to-refresh-tokens-in-js-web-app-when-not-using-hosted-login-page/8504 "2017-10-18T16:23:22Z")
Because I am no longer using a Hosted Login Page, I switched over from loginWithCredentials() function to asynchronous login() method in auth0 JS client to receive id/access tokens. Since login(), does not use the /aut… --- ## [Getting both tokens and redirection with Lock 10 for web](https://community.auth0.com/t/getting-both-tokens-and-redirection-with-lock-10-for-web/8055)
**Author:** [@karlykoueka](https://community.auth0.com/u/karlykoueka)\ **Replies:** 4\ **Last updated:** [September 26, 2017, 7:00pm UTC](https://community.auth0.com/t/getting-both-tokens-and-redirection-with-lock-10-for-web/8055 "2017-09-26T19:00:48Z")
After testing Lock 10 for Web I am wandering how redirect to the welcome page by using the options and still saving token on LocalStorage. For now with the basic example I can either redirect or save the token. How can… --- ## [Does the lock widget validate the at\_hash claim for us from the Browser?](https://community.auth0.com/t/does-the-lock-widget-validate-the-at-hash-claim-for-us-from-the-browser/8063)
**Author:** [@tal](https://community.auth0.com/u/tal)\ **Replies:** 0\ **Last updated:** [September 2, 2017, 1:37am UTC](https://community.auth0.com/t/does-the-lock-widget-validate-the-at-hash-claim-for-us-from-the-browser/8063 "2017-09-02T01:37:04Z")
I am setting up Identity-Provider initiated SAML Login for a Single Page App using the Auth0 Lock widget. I had some trouble because the tokens we’re getting have the “at\_hash” claim that our other tokens do not. The tok… --- ## [Setting jti in tokens with Auth0 Management API v2](https://community.auth0.com/t/setting-jti-in-tokens-with-auth0-management-api-v2/7624)
**Author:** [@eric.barault](https://community.auth0.com/u/eric.barault)\ **Replies:** 2\ **Last updated:** [August 18, 2017, 11:38pm UTC](https://community.auth0.com/t/setting-jti-in-tokens-with-auth0-management-api-v2/7624 "2017-08-18T23:38:29Z")
After many tries, i wonder if the following documentation on setting the jti claim in jwt tokens is still valid: blacklists I defined a rule according to the example: function (user, context, callback) { user.jti = r… --- ## [Impersonation API: response\_type: 'token' not working](https://community.auth0.com/t/impersonation-api-response-type-token-not-working/7789)
**Author:** [@Dan\_Grayson](https://community.auth0.com/u/Dan_Grayson)\ **Replies:** 1\ **Last updated:** [August 9, 2017, 11:48pm UTC](https://community.auth0.com/t/impersonation-api-response-type-token-not-working/7789 "2017-08-09T23:48:17Z")
Hi, I had a working implementation of impersonation, and it seems that today it stopped working because the impersonation API MY\_DOMAIN.auth0.com/users/USER\_ID/impersonate is generating an impersonation url with a redir… --- ## [How do you achieve the functionality described in the guide "Obtain AWS Tokens to securely call AWS APIs and resources" after June 8, 2017?](https://community.auth0.com/t/how-do-you-achieve-the-functionality-described-in-the-guide-obtain-aws-tokens-to-securely-call-aws-apis-and-resources-after-june-8-2017/7425)
**Author:** [@wlokes](https://community.auth0.com/u/wlokes)\ **Replies:** 1\ **Last updated:** [July 12, 2017, 4:34pm UTC](https://community.auth0.com/t/how-do-you-achieve-the-functionality-described-in-the-guide-obtain-aws-tokens-to-securely-call-aws-apis-and-resources-after-june-8-2017/7425 "2017-07-12T16:34:16Z")
The guide “Obtain AWS Tokens to securely call AWS APIs and resources” ( Integrate with Amazon Web Services and Products - Auth0 Docs) describes the exact functionality that I want, but I created my Auth0 account after Ju… --- ## ["Can't exchange token" error in the setup wizard](https://community.auth0.com/t/cant-exchange-token-error-in-the-setup-wizard/7167)
**Author:** [@sam11](https://community.auth0.com/u/sam11)\ **Replies:** 0\ **Last updated:** [June 21, 2017, 2:39am UTC](https://community.auth0.com/t/cant-exchange-token-error-in-the-setup-wizard/7167 "2017-06-21T02:39:16Z")
Hey Guys, While automatic configiration in the setup wizard they show me this error “can’t exchange token”. this is the error log 06/20/2017 17:31:43 WP\_Auth0\_Api\_Client::update\_client N/A {“statusCode”:400,“error”:“Ba… --- ## [Auth0 adding scopes for an API](https://community.auth0.com/t/auth0-adding-scopes-for-an-api/7156)
**Author:** [@Tom\_Schreck](https://community.auth0.com/u/Tom_Schreck)\ **Replies:** 1\ **Last updated:** [June 20, 2017, 8:37pm UTC](https://community.auth0.com/t/auth0-adding-scopes-for-an-api/7156 "2017-06-20T20:37:39Z")
I’m adding my custom ASP.Net WebAPI to Auth0’s API configuration. It’s my understanding I can add scopes to my API inside Auth0. A scope is just a name like read:contacts. When a user to my client authenticates, I can… --- ## [Should refreshing tokens also return a new refresh token?](https://community.auth0.com/t/should-refreshing-tokens-also-return-a-new-refresh-token/6972)
**Author:** [@sebastian.dumbs](https://community.auth0.com/u/sebastian.dumbs)\ **Replies:** 3\ **Last updated:** [June 8, 2017, 5:13pm UTC](https://community.auth0.com/t/should-refreshing-tokens-also-return-a-new-refresh-token/6972 "2017-06-08T17:13:19Z")
I am having problems when working with refresh tokens on Cordova/Ionic2+ I implemented the login according to the ionic2+ quickstart and tried using my refresh token by making a request to /oauth/token according to Refr… --- ## [OAuth for generating Management API tokens](https://community.auth0.com/t/oauth-for-generating-management-api-tokens/6617)
**Author:** [@claudio.petrini](https://community.auth0.com/u/claudio.petrini)\ **Replies:** 2\ **Last updated:** [May 16, 2017, 1:18pm UTC](https://community.auth0.com/t/oauth-for-generating-management-api-tokens/6617 "2017-05-16T13:18:05Z")
From the Management API documentation it seems that user would need to share the manually generated token or their client\_id and client\_secret in order to generate a token. Is there a way to interact with the Management… --- ## [AWS token delegation flow yields tokens that are already expired](https://community.auth0.com/t/aws-token-delegation-flow-yields-tokens-that-are-already-expired/6369)
**Author:** [@vegard](https://community.auth0.com/u/vegard)\ **Replies:** 0\ **Last updated:** [April 26, 2017, 1:14pm UTC](https://community.auth0.com/t/aws-token-delegation-flow-yields-tokens-that-are-already-expired/6369 "2017-04-26T13:14:55Z")
Hi! I’m trying to implement the approach documented here: And I have authentication set up and mostly working - I get AWS credentials back to my JS app. However, the credentials have an expiry set as the same time as… --- ## [How to renew access token with a refresh token](https://community.auth0.com/t/how-to-renew-access-token-with-a-refresh-token/6192)
**Author:** [@jbello123](https://community.auth0.com/u/jbello123)\ **Replies:** 1\ **Last updated:** [April 12, 2017, 3:39am UTC](https://community.auth0.com/t/how-to-renew-access-token-with-a-refresh-token/6192 "2017-04-12T03:39:09Z")
I am able to retrieve an access\_token, refresh\_token, and id\_token from the oauth/token endpoint. I need to refresh both the id\_token and the access\_token for my API when they expire. However, the /delegation route that …