In action post-login event authorization roles is empty

[turbo]

I created a post-login action to attach roles on the idToken but the event auth roles come empty.

event.authorization.roles

My app is using the Google Workspace authentication.

This is the code of my action

As a workaround I am fetching from the user app_metadata but that isn’t ideal because I have to manually update the app_metadata for each user so it matches the real Auth0 roles.

Any idea what am I missing? I wonder if I need to enable an extra permission to the web application.

[dan.woda]

Hi @turbo,

Can you please DM me the name of the tenant and an example user who has roles assigned. I’d like to take a look at the configuration. Thanks!

[asciibn]

Hi,
Similar situation here. I think I have it right but can’t see anything in the tokens or the logs.
I’m not sure the action is getting triggered.
thanks.

[dan.woda]

Hi @asciibn,

This has been reported to the team and is in our backlog.

[asciibn]

Thanks. If it helps my account is through Heroku.