Extract id_token in my react app

[tyf]

@vishal.agarwal

Technicially, I should use access_token only but I am not able to figure out why id_token is working and access_token is treated as unauthorized by the auth0 middleware in the laravel backend.

Thanks for confirming - You should definitely be using the access token against your backend. I believe the issue is related to the access token being opaque as I mentioned here:

Access token giving unauthorized in backend

Hey @vishal.agarwal thanks for confirming - My guess is that your token is missing an audience claim and is thus opaque.

Once you include an audience param (AuthorizationParams in auth0-react) in the request to get tokens the middleware should be able to verify the access token successfully. The audience is just the API identifier you use when registering an API in your Auth0 dashboard.