How do i get claims from access token in @auth0/nextjs lib?

[danyo]

Hi there i have a nextjs app and we have roles / permission setup. I return the permissions in the access token as a claim. Is there a way to read them from the nextjs api?

I found a getSession but all it returns is the encoded JWT access token.

Thanks in advance

[tyf]

Hey there @danyo welcome to the community!

@danyo

Is there a way to read them from the nextjs api?

I found a getSession but all it returns is the encoded JWT access token.

Where is exactly in your app are you looking to access the permissions? If you can elaborate on your use case a bit that could be helpful.

The following post may have the answer(s) you are looking for:

Token in appSession cookie cannot be decoded

I was referring to the part of the token before the first period. For example, if you paste this token in jwt.io/, you’ll see the header decoded, but not the payload: eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIiwiaWF0IjoxNjE3ODAzNDc5LCJ1YXQiOjE2MTc4ODE3MjUsImV4cCI6MTYxNzk2ODEyNX0..TIKxzG4pPsaR94xs.OcYKxDstl98CUxx9NfgjfBMNwjxChdT8CPP0ieAW6ODsBXBFaoPCIgBwGrZMxzDctd2nQs0eG52q1FGynbh4zmD1__Wu5zLlUHBojHCZB-kuJPLP-kzMxggr9dpQ7oZL02MgUh689Kh3byV6513QG3JSWw7kOmlll7o87aGrEShDPIxvaprHlDfM2iCfq9GJU0UuqHIhRAqWu…

Let us know!

[danyo]

Hi tyf.
I was looking to access the permissions from the nextjs server api.

I want to create an identity api endpoint which returns the permissions along with some other user data that is only stored in the access token so i can tailor the ui display based on a users permissions.

In the end i just went with the authorized scopes since they are available in the api. Seems to work okay.

[tyf]

Hey @danyo apologize for the delayed response here, but thanks a bunch for following up with the community!

@danyo

In the end i just went with the authorized scopes since they are available in the api. Seems to work okay.

This is a totally valid approach - It’s common to infer permissions this way based on scopes.