So I want to make a post request to my nextJS backend and the route i am making the req to a protected route so in my Rest client file (req.rest) I need to tell auth0 im authenticated but i do not know how to do that.

req.rest

POST http://localhost:3000/api/video
Content-Type: application/json
Authorization: Bearer cookie

{
    "title": "Video",
    "description": "Video description"
}

api/video.js

import { withApiAuthRequired, getSession } from "@auth0/nextjs-auth0";
import Video from "../../database/models/Video";

export default withApiAuthRequired(async function handler(req, res) {
  if (req.method === "POST") {
    try {
      const { user } = getSession(req, res);

      const newVideo = new Video({
        title: req.body.title,
        description: req.body.description,
        ownerId: user.sub,
      });

      await newVideo.save();

      res.json(newVideo);
    } catch (error) {
      res.status(500).json({ error: error.message });
    }
  }
});

CodePudding user response：

I'm not sure I understand your question. Your API should determine if the user is authenticated by validating the bearer token value you are passing through the Authorization request header, you shouldn't need to pass additional data as separate parameters to authorize the API. If you do need additional data to determine if the user is authorized to consume the API, that should be included inside of the bearer token as a claim.

CodePudding user response：

So I haven't really found a solution but I do have a workaround which is to just make new page on the frontend for requests and send the requests from there.