I have a react SPA and an elixir API. The API has a machine to machine token so it can create users on auth0. In the SPA I can log in successfully all good, I set the bearer successfully as per this guide: https://auth0.com/docs/quickstart/spa/react/02-calling-an-api?download=true However when my…

It’s expected and the only exception for containing multiple audiences. Otherwise, it’s not possible to support two of your own audiences with one access token.

Thanks! What’s the reason it’s there though? That’s the bit I’m not sure on.

Ahh there are two because one’s for the machine to machine access token right? I think I get it! Thanks

Does that mean a user with that id token can also hit the auth0 user info api though?

Friendly ping @mathiasconradt :slight_smile:

Does that mean a user with that id token can also hit the auth0 user info api though? No, but with the access token. The ID token is self-contained, can’t/shouldn’t be used against an API. Reason that the /userinfo audience is in the access token is that you don’t necessarily need a ID token but …

Hey @mathiasconradt , can that be better documented on the Get Access Tokens page? From the page: Access Tokens can have multiple target audiences as long as your custom API’s signing algorithm is set to RS256 . That lead me to believe I could specify multiple audiences on my call to the author…

That’s indeed confusing. I’ll submit an internal ticket to the documentation team.

My token has multiple audiences. Is that normal?

Get Help

Topic		Replies	Views
Multiple audiences in an access token Get Help audience , access-token	4	7912	March 19, 2019
Access token has two audiences? Get Help	3	6901	October 8, 2021
Passing 1 audience to get access_token request, but returned access_token has 2 audience Get Help jwt	6	2851	April 12, 2022
OPError: invalid_token (The access token signature could not be validated Get Help apis , application	8	2519	March 23, 2023
Understanding how the "audience" concept actually works Get Help	7	119860	December 14, 2022

My token has multiple audiences. Is that normal?

Related topics