Creates a new anonymous session and persists the tokens locally.
Optionaloptions: CreateAnonymousSessionOptionsAlways returns null in EA — session tokens are issued as opaque JWEs and
cannot be decoded client-side. Reserved for future JWT format support.
Returns a valid anonymous access token, renewing it when expired.
If the stored access token is still fresh (more than 60 s remaining), it is
returned directly without a network call. Otherwise the session token is used
to re-mint the access token. If the session token has also expired, the local
cache is cleared and an AnonymousSessionError with code session_expired is
thrown — call createSession() to start a new session.
Optionaloptions: AnonymousGetTokenSilentlyOptionsReturns true if a session token exists in the local cache.
Ends the anonymous session and clears all locally stored tokens.
Mints a short-lived transfer ticket (30s single-use JWE) for linking the
anonymous session during loginWithRedirect(). Returns null if no session
is active or the request fails — callers must never be blocked from login.
Browser-layer wrapper around auth0-auth-js
AnonymousSessionClient.Adds local session storage (localStorage or memory) so callers never need to manage the session token themselves.
getTokenSilently()returns a cached access token when still valid and renews it transparently when expired.The session token is stored once and shared across all audience/scope slots. Each slot stores only its own access token and expiry.
Exposed on
Auth0Clientasauth0.anonymous.