View Application Type

You can check whether an application is registered with Auth0 as a confidential or public application. Auth0 determines this based on the Token Endpoint Authentication Method setting, which defines how an application authenticates against the Authentication API Get Token endpoint.

Go to Auth0 Dashboard > Applications > Applications, and select the name of the application to view.
Under Application Properties, locate the Token Endpoint Authentication Method field.
Its valid values are:
- None, for a public application without a client secret
- Post, for an application using request body parameters to send a client secret
- Basic, for an application using the HTTP BASIC authentication scheme

These values map to confidential and public applications as follows:

Application Type	Example	Token Endpoint Authentication Method
Public	Single-page or native	None
Confidential	Regular web or machine-to-machine	Basic, Post, unspecified

Public applications cannot maintain the confidentiality of the credentials required for Token endpoint authentication methods like Post and Basic.

Docs