I have a collection of SPA sites that pass the JWT to the ASP Web API backend, which verifies the token is valid and extracts some custom claims I’m inserting (using a rule) for permissions. Sometime in the last few days my API has started complaining the users aren’t authorised. Long story short i…

Hi @olly , I’ve heard back from the team. There was an issue where certain custom claims that were invalid URLs were not being added to the token. This is issue was identified on the 15th and should have been resolved within 24 hours. It sounds like that would be within the timeline you have state…

olly April 17, 2020, 9:35am 6

Also have just seen this: Rule with blank namespace stopped working for two days then started working again so it’s not just me who has experienced this problem.

Thanks,
Olly

Custom claims in access token no longer appearing