Authorization code flow returns opaque token instead of JWT even though audience is set

,

Hi @brady.dean,

Welcome to the Auth0 Community!

I understand that you’ve been obtaining an opaque token instead of a JWT access token.

Yes, that is correct. You will need to specify the audience parameter to get a JWT access token. Without specifying an audience parameter will return an opaque token with the information from the /userinfo endpoint. This is consistent with our Control Access Token audience documentation.

I have just tested this myself and can confirm that including the audience returns a JWT token, whereas excluding the audience returns an opaque token. This is working as expected.

In this case, I recommend that you make sure that the /authorize request when using Postman recognizes the audience parameter or the changes you made to your request.

Please let me know how this goes for you.

Thank you.