await auth0.buildAuthorizeUrl(options);

Builds an /authorize URL for loginWithRedirect using the parameters provided as arguments. Random and secure state and nonce parameters will be auto-generated.

await auth0.checkSession();

Check if the user is logged in using getTokenSilently. The difference with getTokenSilently is that this doesn't return a token, but it will pre-fill the token cache.

It should be used for silently logging in the user when you instantiate the Auth0Client constructor. You should not need this if you are using the createAuth0Client factory.

const claims = await auth0.getIdTokenClaims();

Returns all claims from the id_token if available.

const token = await auth0.getTokenSilently(options);

If there's a valid token stored, return it. Otherwise, opens an iframe with the /authorize URL using the parameters provided as arguments. Random and secure state and nonce parameters will be auto-generated. If the response is successful, results will be valid according to their expiration times.

If refresh tokens are used, the token endpoint is called directly with the 'refresh_token' grant. If no refresh token is available to make this call, the SDK falls back to using an iframe to the '/authorize' URL.

This method may use a web worker to perform the token call if the in-memory cache is used.

If an audience value is given to this function, the SDK always falls back to using an iframe to make the token exchange.

Note that in all cases, falling back to an iframe requires access to the auth0 cookie.

const user = await auth0.getUser();

Returns the user information if available (decoded from the id_token).

const isAuthenticated = await auth0.isAuthenticated();

Returns true if there's valid information stored, otherwise returns false.

await auth0.loginWithPopup(options);

Opens a popup with the /authorize URL using the parameters provided as arguments. Random and secure state and nonce parameters will be auto-generated. If the response is successful, results will be valid according to their expiration times.

IMPORTANT: This method has to be called from an event handler that was started by the user like a button click, for example, otherwise the popup will be blocked in most browsers.

await auth0.loginWithRedirect(options);

Performs a redirect to /authorize using the parameters provided as arguments. Random and secure state and nonce parameters will be auto-generated.

auth0.logout();

Clears the application session and performs a redirect to /v2/logout, using the parameters provided as arguments, to clear the Auth0 session. If the federated option is specified it also clears the Identity Provider session. If the localOnly option is specified, it only clears the application session. It is invalid to set both the federated and localOnly options to true, and an error will be thrown if you do. Read more about how Logout works at Auth0.