I want to use impersonation to log into an angular application from the auth0 dashboard.
I am using the same scope as used during the login : “openid email profile”
The redirect url is good but the id_token parameters seams to be missing.
After reading the documentation it seams that the “openid” scope should be enough for the id_token to appear:
Impersonating a user using the Dashboard will not return a ID Token to your application by default. To achieve this, call the impersonation endpoint manually or in the Advanced Settings. If you call the endpoint manually, add additionalParameters.scope: “openid” to the request body.
In the other hand the access_token is an opaque token:
scope: ‘openid’: (default) It will return, not only an opaque Access Token, but also an ID Token which is a JSON Web Token (JWT). The JWT will only contain the user id (sub claim).
My application needs a JWT id_token and a JWT access_token to work.
Is there a way to retrieve a JWT access_token with the opaque token ?
What I’m I missing to retrieve the id_token ?
I kind of suppose It will not be possible to do impersonation properly with this version, will the next version allow me to do it?