Validating SPA JWT Tokens in the backend

[stefanmihartescu]

Hello,

I’m connecting with github and I want to obtain IDP tokens from management api.

Using this guide Auth0 Python API SDK Quickstarts: Add Authorization to a Flask API application the process goes as follow:

1. User logins

2. Use access_token to fetch / on backend
3. Validate token on backend using public key and referencing custom api

Validation works for M2M tokens but not for SPA tokens.

How do I validate SPA tokens ?

[stefanmihartescu]

PS:

Omitted to mention the audience when requesting the token.