Issue access token after third party API validation and include custom claims .NET API

Get Help
, , , ,
2

Did you find a solution to this problem?
It sounds like you need a version of this: draft-ietf-oauth-token-exchange-03

Essentially, exchange an ID token from a third party for an API access token at OAuth.

The real world physical use case is: exchange passport for room key at hotel

I don’t believe Auth0 implements this yet (if ever). However, an approach to try is to build a service that:

  1. Validates incoming trusted third party JWT from client
  2. Mint a custom API access token using private key + suitable JWT library
  3. Send API access token back to client
1 Like