{allowedWebOrigins}
)}
+ {enableAllowRefreshTokenRotation !== undefined && (
+ - Next, click the expand arrow to the right of the toggle to view the - permissions. Use the filter to find and select the -
create:users and update:users permissions and
- click Update to save the changes.
-
- 
-
- -
-
- - Go to Actions > Library in the Auth0 Dashboard. - -
- - Click Create Action > Create Custom Action. - -
-
- Name the Action
account-linkingand select the{" "} - Post Login trigger. -
- - Copy and paste the following code into the Action code editor: -
-
-
-
-
AUTH0_DOMAIN: Copy from the Account Linking App settings. -
- -
-
AUTH0_CLIENT_ID: Copy from the Account Linking App - settings. -
- -
-
AUTH0_CLIENT_SECRET: Copy from the Account Linking App - settings. -
- -
-
ACTION_SECRET: Open a terminal and run{" "} -uuidgento generate a secret that is unique to this - application and copy it here. -
-
-
- - In the Actions code editor on the left side switch to the{" "} - - Dependencies - {" "} - tab (represented with a package icon) and click{" "} - Add Dependency to add the following dependencies: -
-
-
-
- Name:
auth0, Version:4.21.0-
- -
- Name:
openid-client, Version:6.3.4-
- -
- Name:
jose, Version:6.0.10-
- -
- Name:
@panva/hkdf, Version:1.2.1-
- -
- Name:
debug, Version:4.4.0-
-
-
- - Finally, click Save Draft to save the Action. Once the - Action is saved, click Deploy to make the Action - available for use. -
- -
-
- - Click Apply to save the trigger. -
- - Navigate to{" "} - - Applications > APIs - + From the Settings page of the API that you just created, click the Add Application button in the right top corner. This will open a modal to create a new Custom API Client.
- - Click the{" "} - Create API button to create a new Custom API. - -
- - Go to the Custom API you created and click the Add Application button in the right top corner. - -
- - After that click the Configure Application button in the right top corner. + Give your Custom API Client a name in the Application Name field and click the Add button to create a new Custom API Client.
-
- Note down the
client idandclient secret{" "} - for your environment variables. + After creation is successful, you should be redirected to the settings page for your newly created Custom API Client application. Note down theclient idandclient secret{" "}for your environment variables.
+ In the Auth0 Dashboard, configure the My Account API: +
-
+
- Navigate to Authentication > APIs, locate the My Account API banner, and select Activate to activate the Auth0 My Account API. +
- Once activated, select Auth0 My Account API and then select the Applications tab.
+
-
+
- Toogle your client application to authorize it to access the My Account API. +
- In the dropdown menu, select the Connected Accounts scopes for the application, ensuring that at a minimum, the
create:me:connected_accountspermission is selected.
+ - Select Update. +
+ - If you're using Multi-Resource Refresh Tokens, navigate to the Settings tab. Under Access Settings, select Allow Skipping User Consent. +
+ You can quickly define a refresh token policy for your application to use when requesting access tokens for the My Account API by doing the following: +
-
+
- Navigate to Applications > Applications and select your client application. +
- On the Settings tab, scroll down to the Multi-Resource Refresh Token section. +
- Select Edit Configuration and then enable the MRRT toggle for the Auth0 My Account API. +
- To access your {connection.replace("-", " ")} data, you need to authorize this application. + To access your {connection.replace("-", " ")} data, you need to + connect your account and authorize this application.
Required permissions:{" "} @@ -179,8 +425,8 @@ export function TokenVaultConsentPopup({ .filter((scope: string) => scope && scope.trim() !== "") .join(", ")}
-For a Dropbox and Google social + connection, you must select Offline Access in the Auth0 Dashboard, enabling + the client application to obtain an Auth0 refresh token. + {allowOfflineAccess && ( +