# Auth0 Android JWT library — private claim spec

**URL:** <https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052>\
**Category:** JWT.io\
**Tags:** android, jwt, api\
**Created:** [July 16, 2019, 11:15pm UTC](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052 "2019-07-16T23:15:36Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![chrisbtoo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/chrisbtoo/32/14720_2.png) [@chrisbtoo](https://community.auth0.com/u/chrisbtoo)\
**Post date:** [July 16, 2019, 11:15pm UTC](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052/1 "2019-07-16T23:15:37Z")

</div>

I’m being sent a JWT with a private claim whose value is in the form of a JSON object. jwtdecode’s [Claim](https://github.com/auth0/JWTDecode.Android#private-claims) class has methods to pull the value as one of several primitives, or as an array of objects, but no method to pull it as a single object.

I’m unable to find any documentation which specifies valid formats for private claim values, and I’m wondering why the developers didn’t include such a method. Was it an oversight, or is there some spec I can point to that will allow me to tell the sender they’re doing it wrong?

---

<div class="post-metadata">

**Author:** ![chrisbtoo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/chrisbtoo/32/14720_2.png) [@chrisbtoo](https://community.auth0.com/u/chrisbtoo)\
**Post date:** [July 17, 2019, 1:32pm UTC](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052/2 "2019-07-17T13:32:12Z")

</div>

I see [this issue](https://github.com/auth0/JWTDecode.Android/issues/21) on github, and its associated pull request. Hopefully the authors decide to merge it.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [July 17, 2019, 1:49pm UTC](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052/3 "2019-07-17T13:49:16Z")

</div>

Hey there @chrisbtoo!

I’ll reach out to repo maintainers to relay that info and let them know about issues and related PR!

---

<div class="post-metadata">

**Author:** ![chrisbtoo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/chrisbtoo/32/14720_2.png) [@chrisbtoo](https://community.auth0.com/u/chrisbtoo)\
**Post date:** [July 22, 2019, 10:36pm UTC](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052/5 "2019-07-22T22:36:10Z")

</div>

Seems they’ve been stubbornly refusing to merge it for over a year, even though the JWT spec clearly says it’s a valid Claim format. I hereby criticize that idea.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [February 27, 2020, 3:01pm UTC](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052/6 "2020-02-27T15:01:31Z")

</div>

Hey there it seems from the conversation that it should be available from 1.4 which is available here:

> **[GitHub - auth0/JWTDecode.Android: A library to help you decode JWTs for Android](https://github.com/auth0/JWTDecode.Android)**
>
> A library to help you decode JWTs for Android. Contribute to auth0/JWTDecode.Android development by creating an account on GitHub.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [February 27, 2020, 3:01pm UTC](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052/7 "2020-02-27T15:01:35Z")

</div>


