ResourceServers
Auth0 resource servers (APIs) and their configurations
Columns
| Name | Type | ReadOnly | References | Description |
| Id [KEY] | String | True |
Resource server ID | |
| Name | String | False |
API friendly name (cannot contain< or >) | |
| IsSystem | Boolean | True |
True if Auth0 system API; false if custom API | |
| Identifier | String | False |
API identifier used as audience (cannot be changed) | |
| Scopes | String | False |
Array of API scope/permission objects | |
| SigningAlgorithm | String | False |
Token signing algorithm | |
| SigningSecret | String | False |
Secret for symmetric algorithms (min 16 chars) | |
| IsOfflineAccessAllowed | Boolean | False |
Whether refresh tokens can be issued | |
| IsConsentForVerifiableFirstPartyClientsSkipped | Boolean | False |
Skip consent for first party applications | |
| TokenLifetime | Integer | False |
Access token lifetime in seconds | |
| TokenLifetimeForWeb | Integer | True |
Web access token lifetime in seconds (Implicit/Hybrid flows) | |
| IsPoliciesEnforced | Boolean | False |
Whether authorization policies are enforced | |
| TokenDialect | String | False |
Access token dialect format | |
| TokenEncryption | String | False |
Token encryption configuration object | |
| ConsentPolicy | String | False |
Consent policy for authorization | |
| AuthorizationDetails | String | False |
Authorization details array | |
| ProofOfPossession | String | False |
Proof-of-Possession configuration for access tokens | |
| SubjectTypeAuthorization | String | False |
Application access permission configuration (EA) | |
| ClientId | String | True |
Linked client ID for this resource server |