# \#access-token **URL:** https://community.auth0.com/tag/264-tag/264.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [How to do e2e testing without cacheLocation="memory"?](https://community.auth0.com/t/how-to-do-e2e-testing-without-cachelocation-memory/198982)
**Author:** [@alex57](https://community.auth0.com/u/alex57)\ **Replies:** 4\ **Last updated:** [September 15, 2026, 7:43pm UTC](https://community.auth0.com/t/how-to-do-e2e-testing-without-cachelocation-memory/198982 "2026-09-15T19:43:29Z")
Hello, I’m setting up Playwright end-to-end tests for our React SPA that uses @auth0/auth0-react. I’d like to keep cacheLocation on the recommended default (“memory”) per your token storage guidance ( Token Storage - Au… --- ## [Call protected controller from serverprerendered blazor component](https://community.auth0.com/t/call-protected-controller-from-serverprerendered-blazor-component/201076)
**Author:** [@planyway](https://community.auth0.com/u/planyway)\ **Replies:** 1\ **Last updated:** [June 24, 2026, 12:11am UTC](https://community.auth0.com/t/call-protected-controller-from-serverprerendered-blazor-component/201076 "2026-06-24T00:11:26Z")
I have a .net core MVC application that has a serverprerendered blazor component. It uses auth0’s refreshing tokens. Someone online suggests getting the token in razor view and pass it to blazor as a parameter. But how t… --- ## [Selecting a specific connected account when using Auth0 Token Vault token exchange](https://community.auth0.com/t/selecting-a-specific-connected-account-when-using-auth0-token-vault-token-exchange/196897)
**Author:** [@laszlo.kovacs](https://community.auth0.com/u/laszlo.kovacs)\ **Replies:** 7\ **Last updated:** [March 18, 2026, 6:20pm UTC](https://community.auth0.com/t/selecting-a-specific-connected-account-when-using-auth0-token-vault-token-exchange/196897 "2026-03-18T18:20:59Z")
Hi everyone :waving\_hand:, We’ve run into a question while using Auth0 Token Vault and were hoping the community could help clarify what’s possible here. Context We’re using the Token Vault token exchange flow to excha… --- ## [completeInteractiveLogin return value — user, session, and idToken not present (auth0-nuxt)](https://community.auth0.com/t/completeinteractivelogin-return-value-user-session-and-idtoken-not-present-auth0-nuxt/197825)
**Author:** [@aleksandra](https://community.auth0.com/u/aleksandra)\ **Replies:** 3\ **Last updated:** [March 11, 2026, 9:15pm UTC](https://community.auth0.com/t/completeinteractivelogin-return-value-user-session-and-idtoken-not-present-auth0-nuxt/197825 "2026-03-11T21:15:19Z")
Hi, I’m following up on a previous thread about accessing user data in the Auth0 callback when using auth0-nuxt: Auth0-nuxt and access to the user data in callback - #3 by remus.ivan I’ve tried the suggested approaches… --- ## [Session Idle Timeout and Access Token Interactions](https://community.auth0.com/t/session-idle-timeout-and-access-token-interactions/197281)
**Author:** [@ptidwell](https://community.auth0.com/u/ptidwell)\ **Replies:** 2\ **Last updated:** [February 17, 2026, 4:43pm UTC](https://community.auth0.com/t/session-idle-timeout-and-access-token-interactions/197281 "2026-02-17T16:43:52Z")
I want to double check my understanding of how session idle timeout works. Using the api.session.setIdleExpiresAt to expire in 15 minutes, my session is correctly terminated if the SPA app requests a new access token af… --- ## [In Next.js auth0.getAccessToken behaves differently in pages router and app router](https://community.auth0.com/t/in-next-js-auth0-getaccesstoken-behaves-differently-in-pages-router-and-app-router/194035)
**Author:** [@radim-kafka](https://community.auth0.com/u/radim-kafka)\ **Replies:** 1\ **Last updated:** [November 18, 2025, 4:53pm UTC](https://community.auth0.com/t/in-next-js-auth0-getaccesstoken-behaves-differently-in-pages-router-and-app-router/194035 "2025-11-18T16:53:17Z")
Hello, I have two versions of the same endpoint one for the PagesRouter (I am currently using in the app) and one for the AppRouter. The endpoint contains only auth0.getAccessToken with refresh: true. I have Test compo… --- ## [My Nextjs application using the same access token twice](https://community.auth0.com/t/my-nextjs-application-using-the-same-access-token-twice/193662)
**Author:** [@huzaifa.murtaza](https://community.auth0.com/u/huzaifa.murtaza)\ **Replies:** 2\ **Last updated:** [November 14, 2025, 5:46pm UTC](https://community.auth0.com/t/my-nextjs-application-using-the-same-access-token-twice/193662 "2025-11-14T17:46:59Z")
My auth0.ts file import { isPlatform } from ‘@/constants’; import { platformApps } from ‘@/constants/enums/enums’; import { Auth0Client } from ‘ /nextjs-auth0/server’; import { NextResponse } from ‘next/server’; expor… --- ## [Session Expiry Issues After Upgrading to nextjs-auth0 v4](https://community.auth0.com/t/session-expiry-issues-after-upgrading-to-nextjs-auth0-v4/192984)
**Author:** [@apps.oh](https://community.auth0.com/u/apps.oh)\ **Replies:** 3\ **Last updated:** [October 15, 2025, 6:37pm UTC](https://community.auth0.com/t/session-expiry-issues-after-upgrading-to-nextjs-auth0-v4/192984 "2025-10-15T18:37:15Z")
We are currently upgrading our project from nextjs-auth0 v3 to v4 and have encountered some issues in our production environment. In our development and staging environments (both connected to the Auth0 sandbox), the up… --- ## [Auth0 and 413's - AD integration generating massive token](https://community.auth0.com/t/auth0-and-413s-ad-integration-generating-massive-token/191171)
**Author:** [@mads2](https://community.auth0.com/u/mads2)\ **Replies:** 3\ **Last updated:** [September 5, 2025, 9:45pm UTC](https://community.auth0.com/t/auth0-and-413s-ad-integration-generating-massive-token/191171 "2025-09-05T21:45:15Z")
Hi Auth0 community. Like many other posts on the internet relating to Auth0, we’re also experiencing problems with too large headers being sent back and fourth to proxy api’s. Now our stack looks like this: NextJS mon… --- ## [NextJS accessing third party api from client, unable to get a token sometimes](https://community.auth0.com/t/nextjs-accessing-third-party-api-from-client-unable-to-get-a-token-sometimes/190770)
**Author:** [@jon\_s](https://community.auth0.com/u/jon_s)\ **Replies:** 3\ **Last updated:** [August 22, 2025, 11:22am UTC](https://community.auth0.com/t/nextjs-accessing-third-party-api-from-client-unable-to-get-a-token-sometimes/190770 "2025-08-22T11:22:13Z")
Hi there. We have a dashboard that is protected in NextJS (we check for a valid session in layout.tsx and redirect to login if there isn’t one). Often see in our error logs that people experience 401s when we try to get … --- ## [How to redirect users to landing page, as soon as session has expired?](https://community.auth0.com/t/how-to-redirect-users-to-landing-page-as-soon-as-session-has-expired/190187)
**Author:** [@brodanoel](https://community.auth0.com/u/brodanoel)\ **Replies:** 2\ **Last updated:** [August 6, 2025, 4:59pm UTC](https://community.auth0.com/t/how-to-redirect-users-to-landing-page-as-soon-as-session-has-expired/190187 "2025-08-06T16:59:36Z")
Hello! Sorry if this question was answered. I really couldn’t find the same scenario (but probably is around there). Context: I’m using https://www.npmjs.com/package/@auth0/nextjs-auth0. I have this scenario: My user … --- ## [Adding custom information to Auth0 access token in Next.js](https://community.auth0.com/t/adding-custom-information-to-auth0-access-token-in-next-js/190172)
**Author:** [@elian](https://community.auth0.com/u/elian)\ **Replies:** 3\ **Last updated:** [August 6, 2025, 12:45pm UTC](https://community.auth0.com/t/adding-custom-information-to-auth0-access-token-in-next-js/190172 "2025-08-06T12:45:42Z")
Hi Auth0 Community, I’m building a Next.js application with Auth0 and I have two questions: Adding custom information to the access token Is it possible to include extra claims (for example user roles, department I… --- ## [ID Token doesn’t contain the sid 【Resource Owner Password Flow】](https://community.auth0.com/t/id-token-doesn-t-contain-the-sid-resource-owner-password-flow/190100)
**Author:** [@t.fukao](https://community.auth0.com/u/t.fukao)\ **Replies:** 1\ **Last updated:** [August 4, 2025, 10:36am UTC](https://community.auth0.com/t/id-token-doesn-t-contain-the-sid-resource-owner-password-flow/190100 "2025-08-04T10:36:49Z")
In a shell script, I make a call to the oauth/token endpoint to retrieve an ID Token. reference ACCESS\_TOKEN=$(curl --silent --request POST \\ --url 'https://${AUTH0\_DOMAIN}/oauth/token' \\ --header 'content-type: ap… --- ## [Refreshed access\_token with custom audience results in 401 Unauthorized on the /userinfo endpoint](https://community.auth0.com/t/refreshed-access-token-with-custom-audience-results-in-401-unauthorized-on-the-userinfo-endpoint/189639)
**Author:** [@morgan.zolob](https://community.auth0.com/u/morgan.zolob)\ **Replies:** 2\ **Last updated:** [July 25, 2025, 5:23pm UTC](https://community.auth0.com/t/refreshed-access-token-with-custom-audience-results-in-401-unauthorized-on-the-userinfo-endpoint/189639 "2025-07-25T17:23:41Z")
I am trying to get user info from the /userinfo endpoint using an access token with a custom audience (the custom audience is necessary for my application). This works with the initial access token, but after getting a n… --- ## [Auth0 Lambda@Edge authentication with CloudFront](https://community.auth0.com/t/auth0-lambda-edge-authentication-with-cloudfront/188974)
**Author:** [@nickycupcakes](https://community.auth0.com/u/nickycupcakes)\ **Replies:** 1\ **Last updated:** [July 14, 2025, 5:58pm UTC](https://community.auth0.com/t/auth0-lambda-edge-authentication-with-cloudfront/188974 "2025-07-14T17:58:21Z")
I am trying to create a static website in S3 (with CloudFront) that uses Auth0 in order to authenticate users in to the site. I have seen most of the samples out there of what the Lambda@Edge login script might look lik… --- ## [Enable token generated by SPA to be passed to separately hosted REST API](https://community.auth0.com/t/enable-token-generated-by-spa-to-be-passed-to-separately-hosted-rest-api/188532)
**Author:** [@mwhicks](https://community.auth0.com/u/mwhicks)\ **Replies:** 1\ **Last updated:** [June 29, 2025, 12:42pm UTC](https://community.auth0.com/t/enable-token-generated-by-spa-to-be-passed-to-separately-hosted-rest-api/188532 "2025-06-29T12:42:51Z")
Hey, all: New to the whole security domain and am sure that this question has been asked before, I just don’t know quite what to search for it. Sorry for the lazy links, Auth0 doesn’t like me embedding stuff. At the mom… --- ## [Auth0 getAccessToken() and getSession() Not Working in Next.js 15 App Router (Server & Client Components)](https://community.auth0.com/t/auth0-getaccesstoken-and-getsession-not-working-in-next-js-15-app-router-server-client-components/185745)
**Author:** [@nithinsriharir](https://community.auth0.com/u/nithinsriharir)\ **Replies:** 6\ **Last updated:** [June 4, 2025, 8:29pm UTC](https://community.auth0.com/t/auth0-getaccesstoken-and-getsession-not-working-in-next-js-15-app-router-server-client-components/185745 "2025-06-04T20:29:52Z")
I’m having persistent issues integrating @auth0/nextjs-auth0 (v4.4.2) with a Next.js 15 project (using the App Router). The main problem: Calling getAccessToken() or getSession() in API routes, server actions, or serve… --- ## [Auth0-nextjs V4 migration: How to update session with new claims after logged in](https://community.auth0.com/t/auth0-nextjs-v4-migration-how-to-update-session-with-new-claims-after-logged-in/186190)
**Author:** [@lex.webb](https://community.auth0.com/u/lex.webb)\ **Replies:** 1\ **Last updated:** [May 1, 2025, 6:46pm UTC](https://community.auth0.com/t/auth0-nextjs-v4-migration-how-to-update-session-with-new-claims-after-logged-in/186190 "2025-05-01T18:46:57Z")
We are looking to migrate from v3 to v4 of the nextjs SDK in order to update to nextjs15 and are mostly working but running into an issue. During our signup process we interrupt the signup flow to gather more informatio… --- ## [How to Increase Session Duration When ID Token Lifetime Is 30 Seconds](https://community.auth0.com/t/how-to-increase-session-duration-when-id-token-lifetime-is-30-seconds/186088)
**Author:** [@soportespectrum](https://community.auth0.com/u/soportespectrum)\ **Replies:** 1\ **Last updated:** [April 29, 2025, 9:32pm UTC](https://community.auth0.com/t/how-to-increase-session-duration-when-id-token-lifetime-is-30-seconds/186088 "2025-04-29T21:32:59Z")
I have a WEB application in react we configure ID Token Expiration Maximum ID Token Lifetime in 30 secods but I saw that the sesion always finched in 24 hours. How can aument this time of the session life? --- ## [Clarification about refreshing access token](https://community.auth0.com/t/clarification-about-refreshing-access-token/184513)
**Author:** [@stefan.boitschuk](https://community.auth0.com/u/stefan.boitschuk)\ **Replies:** 2\ **Last updated:** [March 27, 2025, 3:49pm UTC](https://community.auth0.com/t/clarification-about-refreshing-access-token/184513 "2025-03-27T15:49:04Z")
Hi, i use react-native-auth0 in my react native expo app and have refresh token rotation enabled. Once the access token is expired I call the getCredentials() hook to request a new token pair. The way i currently unders… --- ## [How do I change M2M access\_token lifetime?](https://community.auth0.com/t/how-do-i-change-m2m-access-token-lifetime/184148)
**Author:** [@dave.natalie](https://community.auth0.com/u/dave.natalie)\ **Replies:** 4\ **Last updated:** [March 19, 2025, 9:55pm UTC](https://community.auth0.com/t/how-do-i-change-m2m-access-token-lifetime/184148 "2025-03-19T21:55:22Z")
Ready to post? :magnifying\_glass\_tilted\_left: First, try searching for your answer. When I obtain a new access\_token using the Client Credentials flow, the expiry time is always set to one hour. (3600 seconds). Ideally,… --- ## [Why access token is not invalidating after password reset](https://community.auth0.com/t/why-access-token-is-not-invalidating-after-password-reset/183205)
**Author:** [@jayaprakashkumar18](https://community.auth0.com/u/jayaprakashkumar18)\ **Replies:** 1\ **Last updated:** [March 3, 2025, 6:59pm UTC](https://community.auth0.com/t/why-access-token-is-not-invalidating-after-password-reset/183205 "2025-03-03T18:59:06Z")
Description: In my application, when I log in from multiple devices and initiate a password reset on one of them, the login sessions on other devices remain active, and the access token remains valid until it expires. It… --- ## [How to get JWT token?](https://community.auth0.com/t/how-to-get-jwt-token/181431)
**Author:** [@abdur258rahman258](https://community.auth0.com/u/abdur258rahman258)\ **Replies:** 3\ **Last updated:** [February 25, 2025, 8:26pm UTC](https://community.auth0.com/t/how-to-get-jwt-token/181431 "2025-02-25T20:26:16Z")
Hi everyone, I’m currently integrating the White-Label App and need to set up authentication. As part of the authentication process, the user should receive a JWT token, but I’m only getting an access token instead. I … --- ## [Custom OAuth IdP not refreshing access token](https://community.auth0.com/t/custom-oauth-idp-not-refreshing-access-token/182746)
**Author:** [@SJunwikul](https://community.auth0.com/u/SJunwikul)\ **Replies:** 1\ **Last updated:** [February 28, 2025, 2:42pm UTC](https://community.auth0.com/t/custom-oauth-idp-not-refreshing-access-token/182746 "2025-02-28T14:42:25Z")
I’m using a custom OAuth IdP, went through all the stuff to get the authenticated user’s IdP access token, but it’s expired and not refreshed. I can refresh it with the IdP’s endpoint and make the API call to the IdP’s s… --- ## [Nextjs Sdk Successful Refresh Token exchange logs spammed](https://community.auth0.com/t/nextjs-sdk-successful-refresh-token-exchange-logs-spammed/182690)
**Author:** [@jbrewer](https://community.auth0.com/u/jbrewer)\ **Replies:** 1\ **Last updated:** [February 24, 2025, 10:32pm UTC](https://community.auth0.com/t/nextjs-sdk-successful-refresh-token-exchange-logs-spammed/182690 "2025-02-24T22:32:31Z")
I am seeing the log Successful Refresh Token exchange after every request once the first access token is exchanged in my application. I currently have my refresh token expiration set to 10 hours and the access token set … --- ## [Should I be using an httponly Cookie or is it ok to use Authorization header with my Web Socket project?](https://community.auth0.com/t/should-i-be-using-an-httponly-cookie-or-is-it-ok-to-use-authorization-header-with-my-web-socket-project/182668)
**Author:** [@jackiegleason](https://community.auth0.com/u/jackiegleason)\ **Replies:** 1\ **Last updated:** [February 24, 2025, 8:17pm UTC](https://community.auth0.com/t/should-i-be-using-an-httponly-cookie-or-is-it-ok-to-use-authorization-header-with-my-web-socket-project/182668 "2025-02-24T20:17:25Z")
I have a simple websocket project using the Auth0 React library… If you wire that up with your Auth0 info spring: security: oauth2: resourceserver: jwt: issuer-uri: ... audienc… --- ## [How to decode tokens in v4 middleware](https://community.auth0.com/t/how-to-decode-tokens-in-v4-middleware/182412)
**Author:** [@dfranco](https://community.auth0.com/u/dfranco)\ **Replies:** 5\ **Last updated:** [February 20, 2025, 1:41am UTC](https://community.auth0.com/t/how-to-decode-tokens-in-v4-middleware/182412 "2025-02-20T01:41:12Z")
Ready to post? :mag: First, try searching for your answer. In v3 I was able to use jwt.decode and fetch the roles and permissions off my access token in the middleware, I’ve upgraded to v4 and i am not able to do that a… --- ## [Logging user out when they change their password](https://community.auth0.com/t/logging-user-out-when-they-change-their-password/181408)
**Author:** [@johan.lindell](https://community.auth0.com/u/johan.lindell)\ **Replies:** 6\ **Last updated:** [February 5, 2025, 5:47pm UTC](https://community.auth0.com/t/logging-user-out-when-they-change-their-password/181408 "2025-02-05T17:47:44Z")
We’re looking to set up a react js and react native app which will use access and refresh tokens to talk to our backend API. When the user changes their password we would like to log them out of all active sessions, as … --- ## [Differences Between sub and user\_id](https://community.auth0.com/t/differences-between-sub-and-user-id/180773)
**Author:** [@charlie.hammond3](https://community.auth0.com/u/charlie.hammond3)\ **Replies:** 5\ **Last updated:** [February 4, 2025, 7:56pm UTC](https://community.auth0.com/t/differences-between-sub-and-user-id/180773 "2025-02-04T19:56:38Z")
Hello, I’m seeing differences between the token sub value and user\_id everywhere else in auth0 and curious why this is the case. What what I’ve read, I think they should generally be the same. The sub values are all val… --- ## [Using local storage instead of session storage in Blazor WASM app](https://community.auth0.com/t/using-local-storage-instead-of-session-storage-in-blazor-wasm-app/180561)
**Author:** [@danclarke-smve](https://community.auth0.com/u/danclarke-smve)\ **Replies:** 2\ **Last updated:** [February 4, 2025, 8:07am UTC](https://community.auth0.com/t/using-local-storage-instead-of-session-storage-in-blazor-wasm-app/180561 "2025-02-04T08:07:37Z")
We’re moving from Azure B2C to Auth0 in our Blazor WASM app (following this article to get it working). This works, but because it defaults to using session storage for the tokens, if the user opens a new browser tab, t… [Next page](https://community.auth0.com/tag/264-tag/264.md?match_all_tags=true&page=1&tags%5B%5D=access-token)