hi, I am writing a SPA (VueJS based) in which I have a button “EDIT” on a page. I would like to enable this button only for users which have a certain permission assigned, e.g. “update:blogs”. I could decode the jwt and see if there is “update:blogs” in the permissions array of the tokens payload……

@udo , You should be verifying the token no matter what, which would require decoding it. If you are using our SDK then this is already happening. The important distinction here is which token. Are you talking about the ID token or the access token? The permissions may be in the AT, but the AT is n…

Best practice to identify user permissions client side (SPA)

Get Help

system Closed October 31, 2020, 4:20pm 8

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
How to use permissions in SPA to render UI? Get Help js , permissions , ui , auth0-spa-js	0	2424	April 9, 2022
Adding user permission to the id-token Get Help management-api , roles , user-management	2	6212	March 23, 2023
Best Practices for Retrieving User Permissions in a SPA (Vue.js) with Node.js API using Auth0 Get Help management-api , roles	6	2590	December 14, 2023
Best practice for getting client-side permissions in an SPA Get Help user-profile , user-management	1	1664	September 28, 2023
When roles are not enough client-side, best practices to get permissions? Get Help management-api , roles	1	265	May 10, 2024

Best practice to identify user permissions client side (SPA)

Related topics