Design and Build Great Web APIs

Chapter Exercise

For this exercise, you’ll define an M2M identity in Auth0 for your credit-check service and then update your code to support access control using OAuth and JWTs. Along the way you’ll use the security bash scripts to request a valid JWT and then use it to make secured requests of your updated credit-check service.

Define Your API in Auth0 and Collect Access Control Parameters

First, sign into the Auth0 website and define or create a new API called bigco-credit-check. Then collect the five important access control parameters (Name, ClientID, ClientSecret, Domain, and Identifier) and update your copy of the auth0.env file in your /security/ folder. (See ​Collecting API Identity Parameters​, for details on how to complete this step.) ...