Why is it necessary to pass an ‘audience’ parameter in the implicit flow authorisation request to receive an access token in JWT format? I’m attempting to get my existing SPA (Angular) and API (NET core) application working against Auth0 using implicit flow. I thought that configuring a SPA applica…

Hi @wr8tt5 as @luis.rudge mentioned we use the audience parameter to make a determination which resource server the user is authorizing access to. By default auth0 issues that opaque token which has limited use on some of our API endpoints. We also issues that opaque access_token when specifying t…

Why is it necessary to pass the 'audience' parameter to receive a JWT?

Get Help

ty.frith September 15, 2022, 10:10pm 9

Additional context

Topic		Replies	Views
Getting JWT Access Token instead of Opaque Token from /oauth/token with Authorization Code Flow Get Help jwt , access-token	4	4613	September 5, 2020
Implicit access_token Opegue, not JWT? OIDC Enabled Get Help	3	3905	December 4, 2018
Authorization code flow returns opaque token instead of JWT even though audience is set Get Help jwt , api	10	5412	November 26, 2021
Audience yes, no, why? Get Help jwt , access-token , opaque-tokens	7	6069	March 27, 2021
Social Identity Provider + Opaque access_token Get Help opaque-tokens , social-provider	3	4247	March 2, 2018

Why is it necessary to pass the 'audience' parameter to receive a JWT?

Related topics