Should we use a rule or a hook for inject custom claim into access token?

[tommy.chheng]

Client Credentials Exchange

and

Rule Examples

both show additions to the access token… which is the recommended path? using a rule or a hook to add a custom claim to the access token?

[colin.coutts]

Hi @tommy.chheng thanks for reaching out to the Auth0 Community!

My suggestion would be to stick with Rules as they’re a bit more flexible but I’m not entirely sure of your use-case so I hesitate to advise too strongly. The Community Engineer Dan Woda has a great post about some of the functional differences between Rules and Hooks which might help you to determine where your code is best run.

Rules and Hooks. Which gets precedence?

Hi @robertz, I apologize for the delay in response and would like to try and provide an answer for future users who have a similar question. Pre and post registration hooks run asynchronously, but are triggered before a rule. To visualize I can link you to this document: [image] Rules are going to run during every authentication and hooks are only going to run during their specific event, before or after registration or during a client credentials grant, depending on the type of hook you ha…

If you can go into your use-case a bit more I may be able to point you in the right direction.

Best,
Colin

[tommy.chheng]

It sounds like using rules would be better here.

This is for adding claims for login not just registration(which seems hooks might be better for)

[konrad.sopala]

Hey there!

As this topic is related to Rules - Hooks - Actions and Rules & Hooks are being deprecated soon, I’m excited to let you know about our next Ask me Anything session in the Forum on Thursday, January 18 with the Rules, Hooks and Actions team on Rules & Hooks and why Actions matter! Submit your questions in the thread above and our esteemed product experts will provide written answers on January 18. Find out more about Rules & Hooks and why Actions matter! Can’t wait to see you there!

Learn more here!