Getting Valid IdToken ,But Invalid AccessToken

thupili_charwaka · May 12, 2022, 5:39pm

Please include the following information in your post:

Which SDK this is regarding:
GitHub - auth0/Auth0.Android: Android toolkit for Auth0 API
SDK Version:
Latest
Platform Version:
Android (Kotlin)

I built a custom UI in Android App which captures the User’s Mobile Number And OTP, and I am using
AuthenticationAPIClient to send OTP and verify OTP ( GitHub - auth0/Auth0.Android: Android toolkit for Auth0 API), After verifying OTP successfully, I am getting an invalid access token and getting a valid ID token(when checked in JWT.IO). not sure what’s going wrong,
is there any way to pass “Audience” using AuthenticationAPIClient? , is this the proper way to do it?

tyf · May 13, 2022, 11:08pm

Hello @thupili_charwaka welcome to the community!

I don’t believe there is - The recommended approach here is to use WebAuthProvider as outlined in our Android quickstart - This method will use a call to /authorize where an audience param can be included. Please see our Android sample:

github.com

auth0-samples/auth0-android-sample/blob/ef848e9f6f317766e926a39ad5c6aa21fddf7031/00-Login-Kt/app/src/main/java/com/auth0/sample/MainActivity.kt#L63


      
              if (cachedUserProfile == null) {
                  binding.inputEditMetadata.setText("")
              }
          }
          
          private fun loginWithBrowser() {
              // Setup the WebAuthProvider, using the custom scheme and scope.
              WebAuthProvider.login(account)
                  .withScheme(getString(R.string.com_auth0_scheme))
                  .withScope("openid profile email read:current_user update:current_user_metadata")
                  .withAudience("https://${getString(R.string.com_auth0_domain)}/api/v2/")
          
                  // Launch the authentication passing the callback where the results will be received
                  .start(this, object : Callback<Credentials, AuthenticationException> {
                      override fun onFailure(exception: AuthenticationException) {
                          showSnackBar("Failure: ${exception.getCode()}")
                      }
          
                      override fun onSuccess(credentials: Credentials) {
                          cachedCredentials = credentials
                          showSnackBar("Success: ${credentials.accessToken}")

Hope this helps!

tyf · May 28, 2022, 11:08pm

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Getting in appropriate access token and audience not working Help token , audience , access-token , access-is-denied , audience-is-invalid	2	7758	March 2, 2018
UnauthorizedError: jwt audience invalid. expected: http://api.mypgguru.com Help api	2	4675	June 6, 2019
Invalid access token Help identifier-first , login-experience	4	1654	April 7, 2023
Invalid Token in JWT.io Help auth0-android , sdks-quickstarts	7	1604	September 28, 2023
AccessToken appears to be invalid Help auth0js , sdks-quickstarts	6	475	March 30, 2024

Getting Valid IdToken ,But Invalid AccessToken

Related topics