Auth0-spa-js: Grant type 'authorization_code' not allowed for the client.

[DjolePetrovic]

Hi!

I'm pretty new to this auth topic. I followed along the react tutorial. But when I click on loginwithredirect I get immediately this error 'Grant type 'authorization_code' not allowed for the client.'. I need to say that I'm using react with typescript.

I've copied the wrapper from @luisrudge in his answer here.

My config was working with the old js library though. Any suggestions what I did wrong?

Thanks

[luisrudge]

This is a config issue. Not sure why your client doesn't have this enabled though :( Go to your client advanced settings and enable the Authorization Code grant:

[DjolePetrovic]

Thank you very much!

[manibha-jain]

thanks it helped

[siwei-li]

Thank you! This helps

[sw-yx]

appreciate this. @luisrudge Feedback: It was very hard to find where to get the "client advanced settings" because there is no page for the "client" and the advanced settings link is hidden all the way down the Application settings page. would make it a little more obvious/discoverable.

[frederikprijck]

Out of curiosity @sw-yx, what made you need to look for this?

If you create an application using the appropriate type (SPA, Web App, Native, ...) the required grant type(s) should be enabled.

E.g, when you create an SPA, these grant types are enabled for you:

When you create a machine 2 machine application, these grant types are enabled for you:

When you create a Web App, these grant types are enabled:

So based on these default Grant Types, the average situation doesn't need you to touch the Grant Types on an Application.

That said, we have documentation around Application Settings in general (https://auth0.com/docs/get-started/dashboard/application-settings), but also about updating Grant Types specifically at https://auth0.com/docs/applications/update-grant-types.

[sw-yx]

@frederikprijck hard to remember because I was trying a lot of things but I think I was trying to test a machine to machine application using the React sample app to see if I could get the authz thing to work (i could not). googling my error brought me here.

I wasn't aware of the difference between a web app application and a m2m application and thought I could modify settings to make it work for both. I'll try setting up a new application from scratch

[frederikprijck]

@sw-yx Sorry for the confusion. I just wanted to mention that, if you create different apps for their purposes, the grant types should be set up correctly.

But yes, if you have a web app that also behaves as a m2m application, you will need to configure the grant types.

The React Sample App needs a SPA application tho, not a Web or M2M application.