Dear all, I have an SPA (React) and a back-end API (Python), and I use a JWT access_token to authorize the client to use the API. My requirements in the back-end are: authorization to access the API, and identification of the user (simply accessing an id that can be used to query our own database)…

Hi @HuG You can put a user ID in the access token. It describes WHO the authorization is for. The verification key is publically available: Locate JSON Web Key Sets John

JWT best practice and understanding

JWT.io

system Closed March 19, 2022, 11:32am 5

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Verifying access_token inside API Get Help access-token	2	4207	March 2, 2018
Is verifying a JWT Access Token enough for custom API access? Get Help auth0 , spa , login , api-authorization , auth0-spa-js	2	2768	February 10, 2021
Access raw ID token? Get Help	3	5363	September 24, 2019
Confusion around how to use id_token and access_token Get Help id_token , access-token	7	13207	March 2, 2018
Best practices for validating access token and getting user info Get Help management-api , access-token , validation , user-info , id-token	2	6151	December 17, 2018

JWT best practice and understanding

Related topics