Auth0 Permission Check with NextJS

[ar4891]

I use React + Auth0 + NextJS for server rendering. Currently I do

export const getServerSideProps = withPageAuthRequired({
  getServerSideProps: async (context: GetServerSidePropsContext) => {
    return {} ;// Return needed server side props
  },
});

As you may already know withPageAuthRequired just checks for authentication not authorization such as, does user have specific roles or not.
How can I check for authorization of a specific user, if user has specific roles or not?

[tyf]

Hi there @ar4891 welcome to the community!

@ar4891

How can I check for authorization of a specific user, if user has specific roles or not?

While I’m not super familiar with NextJS, typically roles are added to an Access Token and are utilized that way - The following resources may be of help:

auth0/nextjs-auth0/blob/main/EXAMPLES.md#access-an-external-api-from-an-api-route

How to Authenticate with Next.js and Auth0: A Guide for Every Deployment Model

Regarding adding the roles as a custom claim to an Access Token, please see:

Setting a user role in an action will not update the permissions in the access token

Hi @kl.auth Welcome to Auth0 Community !!! Don’t use Management API call for this. You can add a custom roles claim in a post-login action like this: /** * @param {Event} event - Details about the user and the context in which they are logging in. * @param {PostLoginAPI} api - Interface whose methods can be used to change the behavior of the login. */ exports.onExecutePostLogin = async (event, api) => { const namespace = 'https://my-app.example.com'; if (event.authorization) { api…

Hope this helps!