SPA + Permissions

[jacob3]

This is what I found when working with SPA and API’s:

SPA using an API through a WebSocket

I’ve been circeling around this problem for a while now, and I find myselft pretty close to a solid solution. I want to share what I found before asking my questions. Both to give some context and to share some information that I found poorly communicated in the Auth0 Docs where WebSockets seems to be a banned word. In retrospect it is clear that a WebSocket can and should be treated the exact same way as a good old HTTP REST API, but when you are in the thick of it WebSockets seems like an ent…

Basically enable RBAC and “Add Permissions in the Access Token”.