How to include permission into access toekn in spa and springboot api?

Help
,
1

Hi, I followed this samples to create project , the protected page access is good. But Access the admin endpoint does not work, cause the permission is empty in access_token.
Can someone help to solve it, thank you.

3

Hi @Kin,

Welcome to the Auth0 Community!

You can include permissions to your access token by toggling on the Add Permissions in the Access Token option in your API settings.

I recommend checking out our API Settings for more details.

Thanks,
Rueben

4

Hi @rueben.tiow ,

I did before, but it dose not work for me

image
image1028×364 22.6 KB

there are permissions and assigned to user
image
image1187×648 29.1 KB

when I get the token in Test Tab ,then the token include permissions,
but when I through getAccessTokenSilently in the spa, then this token not include permissions

5

Hi @Kin,

I have just tested this myself and got the permissions in my access token successfully. You must ensure the user is authenticating against your API to get the permissions. The test tab is using the client credentials flow which is non-interactive. You will need to use the authorization code flow. Please refer to our Call Your API Using the Authorization Code Flow with PKCE documentation.

Thanks,
Rueben

6

Hi @rueben.tiow ,
I think my flow is authorization code flow.
I used the code on below to get token in my react SPA

   <Auth0Provider
      domain={domain}
      clientId={clientId}
      authorizationParams={{
        audience: audience,
        redirect_uri: redirectUri,
      }}
      onRedirectCallback={onRedirectCallback}
    >
   const {  getAccessTokenSilently } = useAuth0();
    </Auth0Provider>

audience from API Settings

image
image639×185 8.56 KB

and domain and clientid from Applications Settings

but the permissions also empty

7

Hi @Kin,

Thanks for the update.

Could you please DM me your tenant name to investigate further?

Thanks,
Rueben