Skip to main content

Machine to machine authentication

Overview​

The recommended way to authenticate microservices with SuperTokens is by using the OAuth2 specification. You have to create an OAuth2 Provider and use the OAuth2 Client Credentials Flow for authorization.

Prerequisites​

This feature is only available to paid users.

Before you can dive deeper in the functionality there are a few things to keep in mind:

  • The feature is available with the SuperTokens Managed Service. It is not included in the Self-Hosted version.
  • You can use it with the Node.js or the Python backend SDKs.

If you do not meet the previous requirements you can use the legacy flow.

Getting started​

Two separate quickstart guides are available for you to follow. The recommendation is to use the Client Credentials Flow. The Legacy Flow guide is here for backwards compatibility and it is going to be deprecated in the future.

Before you explore a guide, read through the OAuth2 Basics page first. It explains concepts used in each tutorial.

OAuth2 Basics

Go through a quick summary of the OAuth2 specifications to get accustomed with the language used in the quickstart guides.

Client Credentials Flow

Implement a common authentication service that all your microservices can use.

Legacy Flow

Legacy info