Next.js API Routes RBAC

Hi @valentin.vad.sh,

Welcome to the Auth0 Community!

You are seeing an opaque token because you are not passing an audience parameter. More on that here: Why is my access token not a JWT? (Opaque Token)

As for RBAC; you can add the user’s roles to the token. There is an example here: