Hi, My API has a large number of fine-grained permissions. Based on the Permissions, Privileges, and Scopes blog post and other references I understand that I do not want to include the entire list of permissions in the scope. Ideally I would like to have coarse-grained “roles” - reader, writer, …

Hey @darrenk ! Generally speaking, regarding API authorization, the Auth0 Identity Provider will issue a JWT access token containing the scope claim. The scope claim content is the intersection of: -scopes requested by the client application with the /authorize request by specifying the scope quer…

Coarse-grained scope in ID token to fine-grained API permission

Get Help

darrenk May 3, 2024, 4:03pm 2

(For some reason - I asked here - I am unable to put relevant tags on my posts. This one needs rbac, roles, scope, permissions, …)

Topic		Replies	Views
How can I get permissions into my scope in the access token? Get Help auth0	10	10611	April 2, 2020
Custom scopes inside access token Get Help jwt , scopes , access-token	3	4457	September 26, 2019
Trouble understanding scopes vs permissions Get Help api , scopes , access-token , api-authorization , scope	7	9390	January 4, 2021
Scopes vs Permissions confusion Get Help	10	16473	December 8, 2020
What is the proper way to do fine-grained permissions? Get Help roles , access-token , permissions	2	9303	July 25, 2019

Coarse-grained scope in ID token to fine-grained API permission

Related topics