Architecture Protect an API Route With default config - Code Flow with PKCE Access an External API from an API Route auth0-react (Access Token Auth) Protecting a Client Side Rendered (CSR) Page