How to validate opaque access token?

Help
,
1

Could you please tell me how to implement validation for signature of opaque access token?

Standard web application. Frontend+Backend(Golang).
Regular Web Application in auth0 dashboard. Using authorization code flow.
I am implementing this scenario:

  1. The user registered through the login page (passed the authorization code flow). The resulting opaque access token backend save in a cookie. And also i save refresh token for this access token in database.
    Next, all API requests from the frontend are sent with the received opaque access token in cookie.

  2. For each API request from the frontend like this, backend do this: validate the access token(signature) from the cookie → see if it is expired → if it is expired, then refresh it using refresh token. And set new access token in cookie. P.S. Refresh token rotation is on of course.

4

Hi!
Could you help me please
i can not implement my scenario because of opaque access token

5

Hi @bryce.wayne.person

Welcome back to the Auth0 Community!

I’ve answered to your questions under your other topic → How to set up a authorization code flow correctly? - #3 by dawid.matuszczyk

Thanks
Dawid