It looks like you are using the token from the managementClient
. That is a machine to machine token.
Are you sure you’re using the access token returned from the passwordGrant
method? I just tested it and the current version of the SDK is working as expected for me.
The token returned by the passwordGrant
method should look something like this:
{
"iss": "https://xxx.auth0.com/",
"sub": "auth0|xxx",
"aud": [
"https://test-api",
"https://xxx.auth0.com/userinfo"
],
"iat": 1691761570,
"exp": 1691847970,
"azp": "xxx",
"scope": "openid profile email address phone",
"gty": "password",
"permissions": [
"do:something"
]
}