Updating Custom Claims After Login Event

Help
,
1

I have used Actions with the post-login trigger to add a custom claim to my ID Token. This makes a call to an API of mine and based on that the claims are added. This work very well.

These claims relate the subscription status of a user. There is a cut over point when a user subscribes where these claims become stale. I was hoping that calling the /userinfo endpoint that is part of the OIDC specification would return accurate data, but that appears to be cached also. As I get stale data from that endpoint as well.

What is the best way to resolve this with Auth0?

3

Hi @baynezy,

You could use Silent Authentication to re-authenticate the user without user interaction. Essentially, this would get a new access token with the updated claims.

Thanks,
Rueben

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.