Access User Permissions in Post-Login Action

That would be great. Currently it is confusing to figure out how to get the user permissions in a SPA. There are a lot of resources out there, some outdated, some only focusing on getting roles. It would be intuitive if one could add the permissions to the id_token via an custom action.

I am for now using the solution from this member: How to add user permissions to ID token - #7 by deanb

“The workaround is to put the permissions on the access token, then open up an endpoint on your server that returns the permissions that are on the access token, then make a request to the new endpoint from your SPA to get the permissions.”

1 Like