Skip to content

Feat/obo token exchange main#1074

Merged
lrzhou25 merged 8 commits intomainfrom
feat/obo_token_exchange_main
Apr 30, 2026
Merged

Feat/obo token exchange main#1074
lrzhou25 merged 8 commits intomainfrom
feat/obo_token_exchange_main

Conversation

@lrzhou25
Copy link
Copy Markdown
Contributor

Description

References

Testing

Checklist

  • I've read and followed CONTRIBUTING.md.
  • I've tested the site build for this change locally.
  • I've made appropriate docs updates for any code or config changes.
  • I've coordinated with the Product Docs and/or Docs Management team about non-trivial changes.

lrzhou25 and others added 2 commits April 29, 2026 11:55
Add comprehensive documentation for On-Behalf-Of (OBO) Token Exchange (RFC 8693) that enables middle-tier services to preserve user identity and permissions when calling downstream APIs.

Key sections:
- Overview of OBO vs Client Credentials Flow
- How it works with MCP servers and microservices
- The act claim and delegation chain
- Prerequisites and Custom API client setup
- SDK integration (JavaScript, Python, cURL)
- Organizations support
- Rate limits across all subscription tiers

Includes sequence diagrams showing:
- User > MCP server > API flow
- User > API1 > API2 > API3 chained delegation

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@lrzhou25 lrzhou25 requested a review from a team as a code owner April 29, 2026 21:11
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 29, 2026

Summary

Status Count
🔍 Total 307
✅ Successful 167
⏳ Timeouts 0
🔀 Redirected 0
👻 Excluded 140
❓ Unknown 0
🚫 Errors 0
⛔ Unsupported 0
Full Github Actions output

@mintlify
Copy link
Copy Markdown
Contributor

mintlify Bot commented Apr 29, 2026

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
auth0 🟢 Ready View Preview Apr 29, 2026, 9:33 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

Comment thread main/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange.mdx Outdated
Comment thread main/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange.mdx Outdated
Comment thread main/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange.mdx Outdated
Comment thread main/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange.mdx Outdated
Comment thread main/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange.mdx Outdated
Comment thread main/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange.mdx Outdated
<Tabs>
<Tab title="JavaScript">

Before you begin, make sure you've installed the [`auth0-api-js`](https://github.com/auth0/auth0-auth-js) library and its dependencies.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this be in pre-requs? Or called out somehow?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is only for javascript SDK, so it's only under JavaScript tab

import { ApiClient } from '@auth0/auth0-api-js';

const apiClient = new ApiClient({
domain: 'YOUR_AUTH0_DOMAIN',
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Placeholder is YourDomain in the rest of the article

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i'm going to keep it YOUR_AUTH0_DOMAIN here because this is what it is used in the env file in the sample app for consistency

Comment thread main/docs/secure/call-apis-on-users-behalf/on-behalf-of-token-exchange.mdx Outdated
@lrzhou25 lrzhou25 merged commit 427a6eb into main Apr 30, 2026
5 checks passed
@lrzhou25 lrzhou25 deleted the feat/obo_token_exchange_main branch April 30, 2026 16:35
@lrzhou25 lrzhou25 added content-maintenance Includes updates as part of the docs team's content maintenance initiative. main-docs Changes related to auth0's main docs (https://auth0.com/docs) labels Apr 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

content-maintenance Includes updates as part of the docs team's content maintenance initiative. main-docs Changes related to auth0's main docs (https://auth0.com/docs)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants