I am a little confused on best practices in dealing with API permissions. I understand that in the API within Auth0, I can configure it to always attach the permissions claim to the access token. I am confused because I was under the understanding that the spec defines the scopes claim as the place …

Auth0 introduced the TOKEN_DIALECT which helps to populate the scope with the requested permissions as long as the user has the required permission or the associated role. The rule isn’t necessary anymore to populate the scope unless the requirements are more complex and the out of the box behavior…

Permissions: claim or scopes

Get Help

system Closed September 21, 2019, 9:55pm 10

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Scopes vs Permissions confusion Get Help	10	16520	December 8, 2020
Trouble understanding scopes vs permissions Get Help api , scopes , access-token , api-authorization , scope	7	9395	January 4, 2021
How can I get permissions into my scope in the access token? Get Help auth0	10	10642	April 2, 2020
Scope/Permission not included in JWT Get Help	12	12966	January 18, 2021
Why are scopes/permissions are duplicated in JWT tokens issued by Auth0? Get Help	2	759	April 29, 2024

Permissions: claim or scopes

Related topics