I’m building a web app + API type of setup, and using the Auth0 Authorization Extension. In the article Auth0 Configuration (SPAs + API) there’s a Rule that removes all scopes that are not in the user’s permissions (according to Authorization Extension): function (user, context, callback) { var p…

Thanks for the additional information regarding stack and flow you’re using, that helps! In this case, the easiest and most straightforward solution will be to escape openid profile email in the rule, since Authlib retrieves Auth0 userinfo by calling the /userinfo endpoint. (The ID token could also…

SPA + API tutorial removes default scopes

Get Help

system Closed March 5, 2019, 8:06am 6

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Removing 'openid','profile' scopes from access token Get Help rules	3	4888	August 19, 2019
Filtering scopes with permissions Get Help auth0	2	3414	August 26, 2019
Filter scopes with an action when using grant_type password Get Help configuration , application	5	75	November 19, 2024
Troubles while setting up Auth0 Extension API - Python Get Help	8	3900	April 9, 2019
Confused: Permissions are not part of Scopes in JWT token Get Help jwt	3	4191	March 5, 2021

SPA + API tutorial removes default scopes

Related topics