OptionalaudienceAudience requested for the anonymous access token. When omitted the
authorization server applies the tenant default. The resource server must
allow anonymous access, otherwise the server reports invalid_target.
OptionalclearWhen true (default), the local auth0_anon cookie is deleted after a successful login callback, once the authenticated session is established. Abandoned logins leave the cookie intact. Clears local (app-domain) cookie only; the tenant-domain auth0_anon cookie is not affected (server-to-server cannot forward the browser cookie to clear it — accepted gap for EA).
OptionalcookieOptionalmaxAge?: numberCookie max age in seconds. Defaults to 2592000 (30 days).
Optionalname?: stringCookie name. Defaults to "auth0_anon"
OptionalsameSite?: "none" | "lax" | "strict"SameSite attribute. Defaults to "lax"
Optionalsecure?: booleanSecure flag. Defaults to true
Master switch. Defaults to false: routes not mounted, methods no-op
OptionalscopeSpace-separated scopes requested for the anonymous access token. When
omitted the authorization server applies the tenant default. Scopes that
are not granted to anonymous subjects are reported as invalid_scope.
Config block for auth0.ts setup