Check access token for user id before accessing backend database

[ty.frith]

Hey @rohit.sharma welcome to the community!

@rohit.sharma

Now we want to pass this same token to our backend api which should validate and extract the User ID from this and do restricted access operation on the database.

How can i do this. Please suggest the best practice here.

You wont be able to achieve this with an opaque access token - In order for your backend to be able to decode the payload you will need to pass a jwt. You’ll need to configure your native app(s) to pass an audience param (your API identifier) when requesting tokens for users. Some more on the audience here:

https://community.auth0.com/t/what-is-the-audience/71414

Hope this helps!