Strange rule update when upgrading authorization extension

We experienced something strange today. As user search v2 is deprecated, we needed to upgrade our authorization extension from v2.4 to v2.6. Our extension is configured to add permissions to the user object.

When we upgraded the extension, one of our rules (auth0-authorization-extension) changed. The permissions were no longer added to the user object, but groups were persisted in the user´s application metadata.

Did we stumble upon a bug, or is there a reasonable explanation for this?


Hey there!

Sorry for such huge delay in response! We’re doing our best in providing you with best developer support experience out there, but sometimes our bandwidth is not enough comparing to the number of incoming questions.

Wanted to reach out to know if you still require further assistance?