Hello, We use the Authorization Extension to assign permissions/groups to users of our SPA. The access_token contains the user’s permissions and our API verifies permissions as expected by looking in the app_metadata for an authorization object. For example our permissions look like: ‘payments:view…

Hi @dan5 , Depending on what exactly you want the token to look like, you can use a client credentials hook to customize the token. Here is the doc: [image] Customize Tokens Using Hooks with Client Credentials Flow Learn how to use Hooks to change scopes and add custom claims in the acc…

Setting permissions per client for M2M applications

Get Help

dan.woda Closed August 27, 2020, 9:46pm 4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Using App Metadata to customize access token per client for M2M applications Get Help	2	2711	January 6, 2023
Assign roles to m2m clients Get Help	6	4165	December 8, 2020
M2M + API: empty permissions Get Help permissions , m2m-tokens	6	3804	November 23, 2021
How to use M2M token scopes Get Help apis , application	5	483	August 2, 2024
Hooks and id_token JWT.io	3	4576	May 9, 2020

Setting permissions per client for M2M applications

Related topics