# Call /user\_info vs implementing Rules

**URL:** <https://community.auth0.com/t/call-user-info-vs-implementing-rules/7631>\
**Category:** Get Help\
**Tags:** access\_token, userinfo, jwt, users, management-api\
**Created:** [July 24, 2017, 12:51am UTC](https://community.auth0.com/t/call-user-info-vs-implementing-rules/7631 "2017-07-24T00:51:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mail3](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@mail3](https://community.auth0.com/u/mail3)\
**Post date:** [July 24, 2017, 12:51am UTC](https://community.auth0.com/t/call-user-info-vs-implementing-rules/7631/1 "2017-07-24T00:51:15Z")

</div>

I’m just getting to grips with Auth0 (very impressed so far!) and have a general question around the best way to get user info.

I have a SPA and an API. I’ve validated via the SPA and send the access\_token to my API (NancyFx app). I’ve written some middleware to decode and valdiate the JWT access\_token but I’d like to decorate the internal Identity of the user with email address etc.

What is the best way to handle this? I think there are 3 ways but would like to know if there are any best practices that I’m missing?

- Call /userinfo with the access token to access the usersinfo.
- Call the management API to get user info
- Write a custom Rule to add claims (e.g. email address) to the access\_token.

---

<div class="post-metadata">

**Author:** ![prashantT](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/prashantt/32/6002_2.png) [@prashantT](https://community.auth0.com/u/prashantT)\
**Post date:** [July 29, 2017, 4:19am UTC](https://community.auth0.com/t/call-user-info-vs-implementing-rules/7631/2 "2017-07-29T04:19:03Z")

</div>

Thanks for the positive feedback, glad to hear it’s working out for you.

You’ve pretty much covered the options to do that - see my answer [here](http://community.auth0.com/questions/6761/get-user-data-server-side?childToView=6795#answer-6795) for an explanation.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:55am UTC](https://community.auth0.com/t/call-user-info-vs-implementing-rules/7631/3 "2018-03-02T05:55:34Z")

</div>


