Exposing Google user accounts groups

[hez]

I am trying to expose the google user account groups collection to our app.

When I inspect the users “Raw Json” I see

    "groups": [
        "Some Group"
    ]

But I cannot appear to get this to be added to the details sent to our app.

I have a Rule that does

function (user, context, callback) {
  var namespace = 'http://our.auth0.com/claims/'; // You can set your own namespace, but do not use an Auth0 domain

  // Add the namespaced tokens. Remove any which is not necessary for your scenario
  context.idToken[namespace + "groups"] = user.groups;
  context.idToken[namespace + "test"] = "test";
  
  callback(null, user, context);
}

but both “test” and “groups” do not show up in the JWT.

What am I missing here?

[dan.woda]

Hi @hez,

It looks like this may be because you are using an Auth0 domain.

I tested it and was not able to get the claims in my token with this rule. Changing to a non-auth0 domain fixed it for me. Take a look at this thread for more detail:

How to retrieve user metadata in the id_token?

Hi, I try to authenticate a user with its username and password. I want to retrieve the JWT in response and find in it his permissions (stored in app_metadata). But the id_token returned does not contain the user_metadata or app_metadata. I tried with the Java driver and HTTP call. Java : AuthAPI auth = new AuthAPI("my-domain.auth0.com", "my_client_id", "my_secret_id"); AuthRequest request = auth.login(username, password) .setScope("openid app_metadata user_m…

Please let me know if this works.

[hez]

Worked like a charm! Thank you for the help!

[dan.woda]

I’m glad it worked for you!