Hi @TuanaCelik,
Welcome to the Community!
You can use either. Which one you choose is mostly going to depend on how much app_metadata each user has. Typically the data in the token should be limited to authentication-related info, like a subscription tier or set of user’s roles. If the data can continue to scale up you may run into an issue with the token being too large. You want to avoid using the app_metadata or user_metadata in place of a dedicated user DB. I don’t have a specific size, but if you are concerned about it then a separate call may be best.
Hope this helps,
Dan
Hope this helps,
Dan