Getting Auth0 credentials
Client credential flow
In machine-to-machine applications where the system authorizes the application instead of the user, the normal authentication procedure is not used. Such types of applications use client credential flow to authorize the applications.
As can be seen from the image above, the client sends the ID to the authorization server and requests for the access token. Then the authorization server issues a token after verifying and authenticating the client. The client can use the access token to call an API that provides the requested data.
Auth0 makes the process of client credential flow easy to implement.
Register the API with Auth0 for that, go to the "Dashboard" and create API. After creating the API, set the permissions.
Integrate the machine-to-machine application with Auth0 by registering the application with Auth0 on the Auth0 "Dashboard."
Go to the "Dashboard" and select "Create Application."
Add a meaningful name for the application and select "Machine to Machine applications."
Select the API for the application and click "Authorize."
Select the permissions for the application's access token, and we are redirected to the "Application settings" tab.
On the "Application Settings" tab, under the " Basic Information" field, we can see the client credentials.
In the "Application Settings" tab, there is the "Application URLs" field that asks for:
Application Login URL: In some cases, the Auth0 redirects to the application login, so this field will take the application's login URL.
Allowed Callback URLs: After the user authentication, we call back to the URLs provided in this field. The protocol "https://" needs to be specified to avoid call-back failure.
Allowed Logout URLs: In the case of logout from Auth0, we redirect to one of the URLs we provide in this field.
Auth0 makes the client credential flow process easy, and following the above-mentioned steps helps to access the Auth0 credentials.
Free Resources