API Authorization

How to implement API authentication and authorization using the OAuth 2.0 authorization framework.

Heads up! As part of our efforts to improve security and standards-based interoperability, we have implemented several new features in our authentication flows and made changes to existing ones. For an overview of these changes, and details on how you adopt them, refer to Introducing OIDC Conformant Authentication.

At some point, your APIs will need to allow limited access to users, servers, or servers on behalf of users.

Auth0's API authorization features allow you to manage the authorization requirements for server-to-server and client-to-server applications.

By using the OAuth 2.0 authorization framework, you can give your own applications or third-party applications limited access to your APIs on behalf of the application itself.

Using Auth0, you can easily support different flows in your own APIs without worrying about the OAuth 2.0/OpenID Connect specification, or the many other technical aspects of API authorization.