I am a little confused on best practices in dealing with API permissions. I understand that in the API within Auth0, I can configure it to always attach the permissions claim to the access token. I am confused because I was under the understanding that the spec defines the scopes claim as the place …

Auth0 introduced the TOKEN_DIALECT which helps to populate the scope with the requested permissions as long as the user has the required permission or the associated role. The rule isn’t necessary anymore to populate the scope unless the requirements are more complex and the out of the box behavior…

Permissions: claim or scopes

Get Help

system Closed September 21, 2019, 9:55pm 10

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Scopes vs Permissions confusion Get Help	10	16457	December 8, 2020
Trouble understanding scopes vs permissions Get Help api , scopes , access-token , api-authorization , scope	7	9384	January 4, 2021
How can I get permissions into my scope in the access token? Get Help auth0	10	10596	April 2, 2020
Scope/Permission not included in JWT Get Help	12	12937	January 18, 2021
OIDC Claims and Scope Values and Management API Access Get Help scopes	2	3753	July 11, 2019

Permissions: claim or scopes

Related topics