We are building a multi-tenant platform using a microservices architecture. There is an SPA for the front end, and many APIs behind an API gateway that serve as the backend. We chose to store permissions in the access token, to avoid having to check them in every API call. So if an API receives a r…

I wanted to follow up on this subject as there has been a recent re-ask of this exact query so I thought I would help shed some light on subject. Any changes made to the user profile will only be reflected in the token’s claims when you get a new token. The OAuth2 spec doesn’t say anything about thi…

Updating permissions in the access token

Get Help

James.Morrison Closed April 20, 2019, 10:26pm 7

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Auth0 update access token on assigning new permission to user role Get Help auth0 , management-api , roles , permissions	5	7161	September 2, 2019
How to detect changes in Access Token (added via Rules) Get Help auth0 , api , login	4	2086	December 22, 2022
How to Add Permissions from Roles to Access Token Get Help user-profile , user-management	6	3235	January 13, 2023
Guidence on storing fluid claims in access token Get Help rate-limit	2	4071	August 29, 2019
Adding user permission to the id-token Get Help management-api , roles , user-management	2	6135	March 23, 2023

Updating permissions in the access token

Related topics