Your Auth0 application's domain. e.g., 'your-tenant.us.auth0.com'
OptionallocalYour Auth0 application's client ID.
OptionaltimeoutOptionalheadersOptionaluseEnables DPoP (Demonstrating Proof-of-Possession) for enhanced token security. When enabled, access and refresh tokens are cryptographically bound to a client-specific key pair.
OptionalmaxThe maximum number of retry attempts for transient errors during credential renewal. Helps handle network failures and transient errors when using refresh token rotation. iOS only - This parameter is accepted on Android for API compatibility but has no effect as the Auth0.Android SDK does not currently support retry configuration.
OptionalcacheHow and where to cache session data. Defaults to memory.
OptionaluseEnables the use of refresh tokens for silent authentication.
OptionaluseFallback to iframe-based token retrieval if refresh token fails.
OptionalaudienceA custom audience for the getTokenSilently call.
OptionalscopeA custom scope for the getTokenSilently call.
OptionaluseWeb only: Enables the use of Multi-Resource Refresh Tokens (MRRT).
When enabled, useRefreshTokens is automatically set to true.
Extends the core Auth0Options with web-specific configuration that is passed down to
@auth0/auth0-spa-js.Remarks
Platform specific: Web only.
See
https://auth0.github.io/auth0-spa-js/interfaces/Auth0ClientOptions.html