Configure JWT-secured Authorization Requests (JAR)

JWT-Secured Authorization Requests (JAR) allow OAuth2 authorization request parameters to be packaged into a single JWT request parameter which is then signed for integrity protection.

Prerequisites

Before configuring your application for using JAR, you must generate an RSA key pair.

Configure JAR for an application

You can configure JAR for an application with the Auth0 Dashboard and the Management API.

Use the Auth0 Dashboard to configure your application to use JAR with previously generated RSA keys.

  1. Navigate to Auth0 Dashboard > Applications.

  2. Select the application you want to use with JAR.

  3. Select the Application Settings tab.

  4. In the Authorization Requests section, enable Require JWT-Secured Authorization Requests.

    Dashboard > Applications > Settings

  5. If no credential is assigned and there are credentials available, you will be prompted to assign an existing credential.

    Dashboard > Application > Settings > Assign Existing Credentials

  6. You will also have the option to assign a new credential.

    Auth0 Dashboard > Applications > Settings > Assign New Credentials

  7. Add and assign a new credential by uploading a previously generated RSA key pair. When prompted, enter the following:

    • Name: a name to identify the credential

    • Public Key: public key of the X.509 certificate in PEM format

    • Algorithm: select the JAR signature algorithm

    • Expiration Date: set the expiration date of the credential

Dashboard > Applications > APIs

Learn more