Access token is not JWT format

[zhuangps.fnst]

In my scenario, Auth0 is used for Amazon Alexa.
I use Alexa’s account linking function to get access token from Auth0, and then call my cloud API with the access token. But the access token cloud API received is not JWT format, and I could not check the permission. I knows I could call some Auth0’s API to get user profile to check permission, but I think it’s not good. Does anyone know how to make Auth0 return JWT format access token.
I just configured some setting in the Alexa 's configure page like API path, client ID etc. and did not do some coding. I am so confusing for this problem, and I hope someone could help me.

[stephanie.chamblee]

Hi @zhuangps.fnst,

Welcome to the Community!

In your Alexa’s configure page do you have a registered API identifier as the audience? In order to receive a JWT, you’ll have to register your API and then use the identifier for the audience in the client application.

Why is my access token not a JWT? (Opaque Token)

Question: Why is my access token not a JWT? (Opaque Token) Answer: An access token will be issued in one of the following formats: JSON Web Token (JWT) : Tokens that conform to the JSON Web Token standard and contain information about an entity in the form of claims. They are self-contained in that it is not necessary for the recipient to call a server to validate the token. Access Tokens issued for the Auth0 Management API and Access Tokens issued for any custom API that you have registere…

[zhuangps.fnst]

Hi @stephanie.chamblee

Thank you for your reply.

As this is my first time to use Alexa to develop smart speaker function. I’m not sure the configure page in Alexa is what you mentioned. I just use this configure to get token from Auth0 successfully. But when I pass token to my cloud API, the cloud found that the token is not JWT format and can’t do other things. Could you have a look of my configure, and figure out where I make a mistake?

I don’t know where I should configure the audience, so I ask here.

[zhuangps.fnst]

I am so confusing that “Alexa Skill Setup” seems not configure for audience.

[Tutorial] How to set up Account Linking for Alexa with Auth0 and Jovo | Jovo

[devdanyan]

I’m running into the same issue, a commenter mentioned “Set the default audience in your tenant settings” but I do not see how to set this any where.

[Tutorial] How to set up Account Linking for Alexa with Auth0 and Jovo

[tyf]

Hey there @devdanyan welcome to the community!

You can set the default audience in your Tenant Settings or using the Management API.

[devdanyan]

Thank you, I also found that I can add audience as parameter to the auth url in the alexa account linking settings page.

https://[your auth0 account].auth0.com/authorize?audience=[the identifier of API]