Hello Ale,
Thank you for the information. I tested the tokens and yes, they have different audiences. I still not sure what am I missing in the configuration or what is the next step to get the right token. This is what I have in Auth0:
- One Application —
Regular Web Application
- One API — Within the API I have one permission and the Application is authorized with the permissions under
Machine to Machine Applications
. When I use the data in theTest
tab, it have the sameclient_id
andclient_secret
as the Application and that toke works fine in the API but not theidToken
oraccessToken
generated by the universal login. - The User has assigned a Role and the Role has the API Permissions attached.
- JWT Access Token Validation Error
Can you please pint me into the right direction?