Hello, I’m using Auth0 to allow users to login with Google SSO in a nextjs application. I need to validate the user with the backend of the application. That being said, auth0 is returning an opaque access token even though I have included https://{tenant}.auth0.com/api/v2/ as the AUTH0_AUDIENCE .en…

Just a quick update on this case. The issue was that the application was not granted access to the Management API. In most cases, if the token is opaque, then there was no audience passed into the call. Here is some documentation describing this. [image] Get Access Tokens Learn how to …

Hi there @collin1 welcome to the community! Do you mind grabbing a sample access token, pasting it in jwt.io and sharing the result here? Please redact any sensitive information. Thanks!

Sure thing. Here’s a <a href="https://jwt.io/#debugger-io?token=eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIiwidWF0IjoxNjg1MDM0MDE4LCJpYXQiOjE2ODUwMzQwMDEsImV4cCI6MTY4NTEyMDQxOH0..0tJHih4__J8XDo02.puPzoFFr1MToB8i3PmCXjKblS6P9VSALfDLJ0VG6zCQcXK4cGtbLwQw2DjNWLWHqKdmwCmmly59YvO4sNEcs0dvzdDDo_Pt8j-kyVayHGQ7l26AuZz3XcYW8JBC_VhIWnskTgD_UrvUsLYGcbAhiYsWqTrvbjwMxmpOJNcXEUMOnf5rIVW8ck3Lnz1nS23Iflpeyx46_3bTwDN9zJLZzRZiboRlijM5aUG_tb6vTNispdfgc0ekiqrrT1VC2Dd90eDVLm7swu0-41bUuB4ChxxYmDkoC4zUuK4pb4Q5yxIWq1Usi0Hc2-A16WayOsore6qrXM82pqODSW49z4rpfItqJEKLK54QPJVPpbVghum2jMtaDU0aKZ_L1WB8yZKpr7lmopDeILJAidUEX06AWslO8WN1j1E03BfTFb9746LOwoaiH9zkntrz18uVFycyyHKp6GEkTPtvT-mOxSfyXS4ERw_WkUu7erghwnEE-ggYy6gW0TfNDMFnnxsVbarGek4mTp2WX0dNIuKlp8lB4yhMjL9ajv0An_O1-prA2EhwUD7ea79heGwkBF4aH87gLe9tkkcqAmN9w8DMcIA15qmaVFShp0tHmT-LxySbMv6GLXdQTxa7CMHu-7Sr6mT8xa61wmI7HJHZ-g3Y8_9Mov-9DwOvcxyc2y0baNtzdDcoG5iRUmuPWxis-t8qlgVt_X49IQ-vjZnydJaZR3CRDv-SVq9-RQNAt2RgFMFmNWjtot8GOmERSDKw28Im5lYN3etVLWR6bM-Wbb5VsxpYDqfpJiZQn_xVP8pkEdsnUHRsxTtPBaIkyGIcNqwXwg9_q6tdHKOG-PNlU6_8iQHYdMkmJeOcb2fuQcSyeEVy5uZudnQrHpZVoIPklkEk1_VD6bANatlezDEu_sx2d5Yhkv00H4GI9qvGZu58MBs994XadP-GwtQQGaxInS_7u8X3JKNF2MYZ8BF4sgjTQSvAX_SitgiyMjYzOXOx61XIx_GnS9qwzafdGL_hP1yakow8e0LoQ4woPjEeDpE1_ULXMt-8b3Y6JrS821ATIDebzxreN9qu2GTMQTsHzo4jEgt163F-nDzfMq5Rt2ejd2sntnmi69-Eve4Hurp-UY54QdAqfombr42jjlDSzwIAc-yx1JRmpjkZCJb-lZUOABHfS5hxqTZx1J4cNj6KynWtcZVf1mnajkszFaL6u8aktIFor79P3pobaafY3zlmJltSZ_jXoYyoQm4eZIwE57mC7qZMCtssp8t4JiSoNrpkUrmpdsgc_tj_LPwF3xsq-NQeQkWkeo_2fAZVmjp60XGBlU84Kd8SiQM9vpsj3RNWw1lyBAI74t7zusYy7fZnYyyOAMx757aMBulxLSlc1Cnav5o_O_ULYrD4f-BxQLc5d2_jRvb9STIDQmKDsCTXT0wqxZyFbASrB1fS0Qy6n1ElohL41jpqxuSUH4cE1x-S6s9ow5bXJkTZSjWcgUTxrcWf_0CWiULCGiCgiPe4b3_k8Pl2Kd0dE_K9T7JXnAgQl3yJA7k0WSXXRCjPLJHYiZtggIaTBvnES8WbWLhnfsk81RhZmvH1sHVj2rJtXDMDwHKmM5CmVlVUJ1DLuPbzGTUT2hSpe5LV2h1w7QhrQKVKycdWARnYwcmmLr-FbU14JR5D37EnkvZRFiee5hEs3ndI0Bgc5s1-QeXYuwJOVNdmU92-g2It68J9pKeZfvEVroWGC-MWGcXRdN0HHmohjNyCn05BT4IiZr3R0v657A6cwQ35SHu9VcIwRtcNQxG7nKOJTBDc6xSPA3WbJ_0_nz7c07zCh-qVYp6iJI3ZM7IIp6nwqVZSUGrjFJPhQhG7woYGO4HCL27AFW21-raa9tnY1NgUdymAxdk6T8XBS28We1VFRWi3yG4TH5-nDFMfnhMr6UVxMvCOWzhOvoUhkdAdxOTa55td5Qv8JHMCc2DQkaHPOm98hFzWAG-4RDDli-1Sb1FBp7AvKI0Zc6YLtzmRanvtPBYDosA9vXAHr2l4JWJpE4SXyiXh9PzIhcnlacLC7z5rAYDmz6IN9l9COtYBVNTfuYy-rxN_4EUsaHjwiGoJYPCKs8OV4fdskbukUGG5JVLyzBuJY4pXEHt8vfsPfFYUfEzpOh8zWTga5YEZUxaPVfqZiNmEcW-DYMddlYoahnv_YhUS59qENiLkwb54rhdU2ijISsT7WLdEcYa6biiy6xTMn2KwzXGMfAxTjAt0i0SsrpGpKvLzcJzJENQ__m00N80l8L3tUOco6nRbbolu__Azjxx7OXSEco4rWLflgbuYoWDFnOPVuY4Y2mUBg3TfkP17ldwo37AjIYsgC7o-RhmfHbft0COq0xoELqaXjRCQb49SUjE68v0WEbnCluA2EEtQaU3yxTP2Yhx1VNZzqsF6cruIpwzvjawdyq4r_dsfN9CpojYC5k7lMyhy6VlAINi5mbeQf4OgTHJdkz6NXyl8Od5HBMOnwKX3ZePzZq8Ga0XxJavvDosd_ENQiqd_qv3J23AiVdM7nIraTTVLLC36m2nojlUuacPDbz8_NSudzBqS8nXfeWngojSzN7DnhKSDbR5XOhNdBqzGpjBzE2IsQ0H2j0-RfdDE1aCm-payj9sutza9NvfOzRpqsWZhOiBaLqntCTJM89M4m8vg6g9QGyYCiS3aZOBu3bZY6y6qKzbSvO9hcOsbmf2u4W-KP-wPdBezhqM6K9GTxZBuM5y1hlbDr-WEnLZ8VVghluDq_qJK1_e-_pNV1bG0QOxceupRD52EqXFBB0FdCOBnJmLecCwTwRQ5rMCUC2efLia8i94Bezz08M3vQl5OEJRUkzBTmplUONo_Td4qKsOYPt2G_R9WoghwCAxITFrNTulkA8_mhy1eQKayq054IekMldHO1KKUONTJmFE5HZIaIE-mQydw93a6lzmQndsb4Evhegk78HJrX_QaT0T9qfpfqVFsmFVTH283zKws2EQC6KJpfFJRqP9gr9adwg2560zdAUTFb7ZsysP0P1cmQCAQ5fcWc8ntdq36ashI6yfjNAlr5ClZ5MPWAYSgipjhPZMUU_iaimgQPpaUrMZ7vMD6vozTWTx9XibJ2lmH6UEUKbKkPUz8M6JoFwUJY7jIOnM5vI_o1cdMb3aYs1qFq-yFkwBxJQ7am-jEPMLcIJ7aL-QudD8Wtn0-Gkfh2ANRV1fHxsmrOGRdSMUYmZZ5GylPaUc9_2tiiWODEqIfLnH6KfPTDgBxL_yDZlwf5DNsRiY7tU2H8X2N4762v7tPOx7oSxes7n7Pw3f8C9pvtNDHg4TotNgn4lWxo9MeC5qScxBHKvCLThuSxw_HvVpfvmzZFxVRgDn2KofsoPjIYQpFECcQMRPwv_BbB2nr9h7YTA01ZafaAeQo.JRIacQ33ORp2UcZliCywBw">link .

Hey thanks @collin1 ! That looks to be an opaque token like you mentioned - Are you positive an audience param is getting passed?

Yes. <a href="https://dev-aoeuaoeuaoeuaoeu.us.auth0.com/authorize?client_id=aoeuaoeuaoeuaoeuaeou&scope=openid%20profile%20email&response_type=code&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fapi%2Fauth%2Fcallback&audience=https%3A%2F%2Fdev-aoeuaoeuaoeuaoeu.us.auth0.com%2Fapi%2Fv2%2F&nonce=aoeuaoeuaoeuaoeuaoeu&state=aoeuaoeuaoeuaeouaoeu&code_challenge=aoeuaoeuaoeuaoeuaeou&code_challenge_method=S256" class="onebox" target="_blank" rel="noopener">https://dev-aoeuaoeuaoeuaoeu.us.auth0.com/authorize?client_id=aoeuaoeuaoeuaoeuaeou&scope=openid%20profile%20email&response_type=code&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fapi%2Fauth%2Fcallback&audience=https%3A%2F%2Fdev-aoeuaoeuaoeuaoeu.us.auth0.com%2Fapi%2Fv2%2F&nonce=aoeuaoeuaoeuaoeua…

Just following up - any thoughts on what may be causing this issue? Collin

Hi @collin1 , Thank you for your response. I am following up for @ty.frith . I have just tested getting an Access Token with Next.js and did not experience any issues. To investigate this issue further, could you please provide me the exact /authorize URL request you made and send it to me via dire…

Thanks, Rueben. I just sent over a message.

Hey all - just following up here.

Last time following up. We won’t be able to use Auth0 as an authentication provider if this isn’t resolved.

Empty Payload in Access Token with Next.js

Get Help

Topic		Replies	Views
The getAccessToken in Nextjs returns opaque token instead of access token even after specifying the audience Get Help classic-universal-login-experience , login-experience	11	2606	February 19, 2025
Empty Payload in Access Token using Next.js Get Help nextjs-auth0 , sdks-quickstarts	1	341	May 20, 2024
Payload in access token is empty after google sing in by Auth0 Get Help management-api , users	1	2211	April 4, 2023
Can't get access token with nextjs-auth0 with the audience set Get Help login-experience , new-universal-login-experience	1	4967	September 16, 2023
How to validate token from login from authorization flow Archived jwt , auth0	7	3360	December 9, 2024

Empty Payload in Access Token with Next.js

Related topics