Session token is returned to Auth0 is invalid

JWT.io
, , , ,
1

Have followed step by step guides provided by Auth0 here to redirect user after login to external site to collect info. I am currently attempting to send info back to Auth0 via signed session token. After trial and error I discovered that this token can be sent back to Auth0 via a parameter in the URL. however it still seems that I am receiving an error stating ‘The session token is invalid: Missing or invalid standard claims’.

as you can see, from my angular project I am simply decoding token passed by auth0 to create new token with my new data

image
image913×457 41.1 KB

then when redirecting back to auth0 I include my parameters for state and myToken

image
image883×133 11 KB

redirect worked as expected before inclusion of session token. but now in logs this is error I receive.

image
image802×165 11.7 KB

2

did you get this issue resolved?

3

unfortunately I have not

4

Hi,
If I understand you correctly, you have redirected to Auth0 universal login, is that correct? If you have the access_token returned back is opaque and cannot be decoded in the manner you are trying. The Id_token will be a standard JWT. A way to get round this is to change the audience to an API you might have associated with the app. In this way Auth0 will now return a normal JWT which can be decoded.