How to get actual app_metadata by auth0js

[dan.woda]

Hi @orestkhomitskyi,

Typically the easiest way to get app_metadata in an id token is to add it as a custom claim. This topic explains why userinfo is limited in its standard claims:

The app_metadata is not included in id_token

I have a single page application. I am able to get an access_token and id_token, but I do not get my user’s app_metadata in the decoded JWT. My code is: auth0 = new auth0.WebAuth({ domain: AUTH_CONFIG.domain, clientID: AUTH_CONFIG.clientId, redirectUri: AUTH_CONFIG.callbackUrl, audience: AUTH_CONFIG.audience, responseType: 'token id_token', scope: 'openid email profile user_metadata app_metadata picture', auto_login: false }) The JWT for my id_token has the emai…

Also take a look at this topic for an example of how to implement custom claims:

Getting last password reset value in .Net Core service

In my .Net Core application I override AuthorizeAttribute. In OnAuthorizationAsync method I get the access token, I then call https://mytenant.auth0.com/userinfo?access_token=xyz to get user profile. Also when I redirect the user for authentication in my SPA, I use these settings scope: ‘openid last_password_reset email profile’. However GET on https://mytenant.auth0.com/userinfo?access_token=xyz is failing to return last_password_reset value. What am I missing? This is all I am getting "{"sub"…

Let me know if you have any further questions.

Thanks,
Dan