In post-login (and m2m on credentials exchange) trigger action call external API with auth0 token

Was reading documentation and found useful examples how to add permissions/role to claims from external API response using actions. But what would be a best approach for calling external API with is secured also with same auth0.

  1. During every user post-login generate m2m access token for calling external API?

Very similar question there: Use Signed Access Token in a Post-Login Action API Request

But If I want to add M2M custom claims from external API. Then in onExecuteCredentialsExchange can be recursion. In M2M onExecuteCredentialsExchange for external token requesting again applying onExecuteCredentialsExchange requesting…

  1. What would be solution for this case?