# \#id\_token **URL:** https://community.auth0.com/tag/id-token/95.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Five Myths About JWTs Debunked](https://community.auth0.com/t/five-myths-about-jwts-debunked/190296)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\ **Replies:** 1\ **Last updated:** [August 7, 2025, 10:13am UTC](https://community.auth0.com/t/five-myths-about-jwts-debunked/190296 "2025-08-07T10:13:54Z")
There are many myths surrounding JSON Web Tokens. This article attempts to debunk five of them. Check them out! --- ## [Add data on Access Token - avoid Rules and Hooks](https://community.auth0.com/t/add-data-on-access-token-avoid-rules-and-hooks/107843)
**Author:** [@douglas.freitas](https://community.auth0.com/u/douglas.freitas)\ **Replies:** 3\ **Last updated:** [May 26, 2023, 6:10pm UTC](https://community.auth0.com/t/add-data-on-access-token-avoid-rules-and-hooks/107843 "2023-05-26T18:10:18Z")
Hi Team, I receive an email inform the Rules and Hooks will be discontinued. I use Rule to add user data on ID\_TOKEN. How I can add custom information on ID\_TOKEN? Sample fo Rule: function (user, context, callback) { … --- ## [How to verify that a JWT is legit?](https://community.auth0.com/t/how-to-verify-that-a-jwt-is-legit/105458)
**Author:** [@Ilanoh](https://community.auth0.com/u/Ilanoh)\ **Replies:** 3\ **Last updated:** [May 1, 2023, 1:24pm UTC](https://community.auth0.com/t/how-to-verify-that-a-jwt-is-legit/105458 "2023-05-01T13:24:33Z")
Hello, I receive an ID Token when a user login to the app. I want to check in my server that the JWT is valid. And then show to my user some specific datas that are not stored with auth0 from my server. Is there a wa… --- ## [Changing ID token expiration value in dashboard not taking effect](https://community.auth0.com/t/changing-id-token-expiration-value-in-dashboard-not-taking-effect/84033)
**Author:** [@admdizon](https://community.auth0.com/u/admdizon)\ **Replies:** 3\ **Last updated:** [December 16, 2022, 12:23pm UTC](https://community.auth0.com/t/changing-id-token-expiration-value-in-dashboard-not-taking-effect/84033 "2022-12-16T12:23:17Z")
In our application’s dashboard, changing the id token expiry from 86400 seconds to something like 300 seconds is not reflected when I view the logs coming thru from our mobile app after logging in–the expires\_in value is… --- ## [How to add user permissions to ID token](https://community.auth0.com/t/how-to-add-user-permissions-to-id-token/88714)
**Author:** [@aaron.hardy](https://community.auth0.com/u/aaron.hardy)\ **Replies:** 6\ **Last updated:** [September 20, 2022, 1:57am UTC](https://community.auth0.com/t/how-to-add-user-permissions-to-id-token/88714 "2022-09-20T01:57:20Z")
Hey community. From our single-page application, we want to know the current user’s permission so we can control access to certain sections or buttons of our app. We’re using organizations. As you’re probably aware, per… --- ## [JWT audience invalid when posting to controller with \[Authorize\]](https://community.auth0.com/t/jwt-audience-invalid-when-posting-to-controller-with-authorize/12766)
**Author:** [@airmaster](https://community.auth0.com/u/airmaster)\ **Replies:** 5\ **Last updated:** [September 15, 2022, 11:41pm UTC](https://community.auth0.com/t/jwt-audience-invalid-when-posting-to-controller-with-authorize/12766 "2022-09-15T23:41:49Z")
Platform: C#, Visual Studio ASP.NET 2.1 Core I am trying to POST a form to a controller, and am using the AuthHttp service to make the post inside of a service: create(volunteer) { return this.authHttp.post(this.v… --- ## [Rules to Actions. Add custom field to id Token JWT body](https://community.auth0.com/t/rules-to-actions-add-custom-field-to-id-token-jwt-body/77135)
**Author:** [@dmytro.demakov](https://community.auth0.com/u/dmytro.demakov)\ **Replies:** 5\ **Last updated:** [February 3, 2022, 6:13pm UTC](https://community.auth0.com/t/rules-to-actions-add-custom-field-to-id-token-jwt-body/77135 "2022-02-03T18:13:26Z")
We currently use simple “Username-Password-Authentication” connection to our custom database and request the next scopes: ‘openid email connection’. Also using google IdP with the same rules. AFAIU all three scopes data… --- ## [Id Token vs Access Token](https://community.auth0.com/t/id-token-vs-access-token/76821)
**Author:** [@kris.macgillivray](https://community.auth0.com/u/kris.macgillivray)\ **Replies:** 2\ **Last updated:** [January 27, 2022, 1:56pm UTC](https://community.auth0.com/t/id-token-vs-access-token/76821 "2022-01-27T13:56:29Z")
Trying to understand where to use Access Token vs ID token. Auth0 is setup as the SP for on Application. We have configured a SAML connection to our IDp (which is connected to our Internal Active Directory). The inter… --- ## [How to decode and access custom claims from idToken using react-native-auth0 SDK](https://community.auth0.com/t/how-to-decode-and-access-custom-claims-from-idtoken-using-react-native-auth0-sdk/76175)
**Author:** [@jw-85](https://community.auth0.com/u/jw-85)\ **Replies:** 6\ **Last updated:** [January 21, 2022, 12:17am UTC](https://community.auth0.com/t/how-to-decode-and-access-custom-claims-from-idtoken-using-react-native-auth0-sdk/76175 "2022-01-21T00:17:00Z")
Hi community, I need a bit of assistance… I am trying to decode the idToken returned from auth0.webAuth.authorize() using the rect-native-auth0 SDK as I have included some custom claims via a Login Action Flow (externa… --- ## ["id\_token not present in TokenSet" error on /login with screen\_hint = signup](https://community.auth0.com/t/id-token-not-present-in-tokenset-error-on-login-with-screen-hint-signup/75668)
**Author:** [@jonpawelko](https://community.auth0.com/u/jonpawelko)\ **Replies:** 1\ **Last updated:** [January 11, 2022, 6:43pm UTC](https://community.auth0.com/t/id-token-not-present-in-tokenset-error-on-login-with-screen-hint-signup/75668 "2022-01-11T18:43:36Z")
My application worked 100% fine running on Localhost3000, but when I moved my NodeJS server to a hosted platform on Digital Ocean I started receiving the “id\_token not present in TokenSet” when I try to login using scree… --- ## [Expiration Time (exp) claim error in the ID token — larger time discrepancies](https://community.auth0.com/t/expiration-time-exp-claim-error-in-the-id-token-larger-time-discrepancies/67091)
**Author:** [@adam.gipril](https://community.auth0.com/u/adam.gipril)\ **Replies:** 3\ **Last updated:** [August 2, 2021, 5:02pm UTC](https://community.auth0.com/t/expiration-time-exp-claim-error-in-the-id-token-larger-time-discrepancies/67091 "2021-08-02T17:02:00Z")
Hi, I’ve looked at a similar topic here, and am curious if something else might be going on in our application. Ours is a Vue app that encounters the error upon invoking handleRedirectCallback. We’ve seen about 11.4k e… --- ## [Id token lifetime expiration doesn't end user session](https://community.auth0.com/t/id-token-lifetime-expiration-doesnt-end-user-session/64938)
**Author:** [@dkotsuka](https://community.auth0.com/u/dkotsuka)\ **Replies:** 2\ **Last updated:** [June 25, 2021, 10:42am UTC](https://community.auth0.com/t/id-token-lifetime-expiration-doesnt-end-user-session/64938 "2021-06-25T10:42:08Z")
I want to understand what is id\_token lifetime is for. Basically, I need to enforce the user to proceed to log in again after some time, but I need to set different times for each application. I tried for id\_token expi… --- ## [Storing Auth0 tokens in session storage instead of local storage](https://community.auth0.com/t/storing-auth0-tokens-in-session-storage-instead-of-local-storage/63154)
**Author:** [@harigovind2295](https://community.auth0.com/u/harigovind2295)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 11:36am UTC](https://community.auth0.com/t/storing-auth0-tokens-in-session-storage-instead-of-local-storage/63154 "2021-05-24T11:36:21Z")
Hi Team, I am using auth0-spa-js in React JS. I am using gettokensilently method to get the token from Auth0 server and currently setting the cachelocation to local storage. Is there any way to tell Auth0 to store the t… --- ## [Custom Parameters not available in Rules context while using gettokensilently()](https://community.auth0.com/t/custom-parameters-not-available-in-rules-context-while-using-gettokensilently/62885)
**Author:** [@harigovind2295](https://community.auth0.com/u/harigovind2295)\ **Replies:** 3\ **Last updated:** [May 21, 2021, 4:48pm UTC](https://community.auth0.com/t/custom-parameters-not-available-in-rules-context-while-using-gettokensilently/62885 "2021-05-21T16:48:07Z")
Hi Team, I am using auth0-spa-js library in my React app . Once after authenticating initially, I want to generate access tokens for other users as part of my requirement , for which I need to add different email addre… --- ## [Id Token for backend API](https://community.auth0.com/t/id-token-for-backend-api/56555)
**Author:** [@tibor](https://community.auth0.com/u/tibor)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 2:22pm UTC](https://community.auth0.com/t/id-token-for-backend-api/56555 "2021-01-21T14:22:06Z")
Hi, We have a SPA, where we only want let the user launch searches if they are authenticated (google, facebook or passwordless magic link). Once the user logged in, we really want him to stay logged in for even 365 days… --- ## [Redirect from Rule - Missing id\_token in exchange response](https://community.auth0.com/t/redirect-from-rule-missing-id-token-in-exchange-response/56145)
**Author:** [@sjungers](https://community.auth0.com/u/sjungers)\ **Replies:** 5\ **Last updated:** [January 13, 2021, 9:43pm UTC](https://community.auth0.com/t/redirect-from-rule-missing-id-token-in-exchange-response/56145 "2021-01-13T21:43:12Z")
Hi, I am testing out the redirect-from-rule functionality to do a bit of housekeeping for users during login. However, I’ve hit an issue that I don’t quite understand. The rule is pretty simple for now: function (user,… --- ## [Auth0|{user\_id } length](https://community.auth0.com/t/auth0-user-id-length/55371)
**Author:** [@diego.alejandro.gome](https://community.auth0.com/u/diego.alejandro.gome)\ **Replies:** 2\ **Last updated:** [December 27, 2020, 4:56pm UTC](https://community.auth0.com/t/auth0-user-id-length/55371 "2020-12-27T16:56:47Z")
I use Auth0 without social identity connection meaning all of my user\_id fields in the id token have a auth0|{user\_id } pattern. I noticed the user\_id part is always a hex number so I want to strip the auth0| part and us… --- ## [How to reference Custom namespaced id token fields](https://community.auth0.com/t/how-to-reference-custom-namespaced-id-token-fields/52032)
**Author:** [@wolfbrownie1995](https://community.auth0.com/u/wolfbrownie1995)\ **Replies:** 1\ **Last updated:** [October 23, 2020, 1:09pm UTC](https://community.auth0.com/t/how-to-reference-custom-namespaced-id-token-fields/52032 "2020-10-23T13:09:31Z")
I have created some custom ID tokens to the auth0 standard of using a namespace such as ‘http://www.test.com/roles’ and assigned an array of roles (strings) to the said idtoken. Problem is I am now in vuejs/javascript, … --- ## [Raw ID token returning undefined](https://community.auth0.com/t/raw-id-token-returning-undefined/50476)
**Author:** [@gokulnarayan09](https://community.auth0.com/u/gokulnarayan09)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 9:20pm UTC](https://community.auth0.com/t/raw-id-token-returning-undefined/50476 "2020-10-13T21:20:26Z")
Moved from a private thread for visibility I am having 2 applications under one tenant. I need to call an API of one application when I am authenticated to the other one. How can I get the access token of the former w… --- ## [How to decode the access/id token in a mobile app using React-native-Auth0 SDK?](https://community.auth0.com/t/how-to-decode-the-access-id-token-in-a-mobile-app-using-react-native-auth0-sdk/48732)
**Author:** [@ilyas-shah](https://community.auth0.com/u/ilyas-shah)\ **Replies:** 2\ **Last updated:** [September 9, 2020, 3:23am UTC](https://community.auth0.com/t/how-to-decode-the-access-id-token-in-a-mobile-app-using-react-native-auth0-sdk/48732 "2020-09-09T03:23:51Z")
Hello community I have a use case where I want to decode the access or id token provided by Auth0 to my mobile app after successfully authenticating the user. Depending on the claims that are in the token, I have to do… --- ## [Validating a token using auth0 java-jwt library in Coldfusion; Plz hlp!](https://community.auth0.com/t/validating-a-token-using-auth0-java-jwt-library-in-coldfusion-plz-hlp/42038)
**Author:** [@bentsh](https://community.auth0.com/u/bentsh)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 4:18pm UTC](https://community.auth0.com/t/validating-a-token-using-auth0-java-jwt-library-in-coldfusion-plz-hlp/42038 "2020-04-29T16:18:47Z")
I am trying to validate an ID token retrieved from Azure AD using the OIDC library msal.js. After I retrieve the token, I pass it in a request to the Coldfusion server. On the server I imported the auth0 Java-JWT library… --- ## [Configure Auth0 API App to accept id\_token instead of access\_token (legacy)](https://community.auth0.com/t/configure-auth0-api-app-to-accept-id-token-instead-of-access-token-legacy/40450)
**Author:** [@sethnejame](https://community.auth0.com/u/sethnejame)\ **Replies:** 4\ **Last updated:** [April 8, 2020, 10:00am UTC](https://community.auth0.com/t/configure-auth0-api-app-to-accept-id-token-instead-of-access-token-legacy/40450 "2020-04-08T10:00:04Z")
First let me start by saying I understand the difference between access\_tokens and id\_tokens, and that it is strongly recommended to use access\_tokens for authorizing against an API. Currently I’m working with a legacy … --- ## [Verifying at\_hash on rs256 id token without access token](https://community.auth0.com/t/verifying-at-hash-on-rs256-id-token-without-access-token/39551)
**Author:** [@ApartmentTherapy](https://community.auth0.com/u/ApartmentTherapy)\ **Replies:** 0\ **Last updated:** [March 17, 2020, 7:51pm UTC](https://community.auth0.com/t/verifying-at-hash-on-rs256-id-token-without-access-token/39551 "2020-03-17T19:51:56Z")
Hi, I saw a couple of other similar questions to mine in the community db but no answers. Hoping someone can shed some light. I have a client app that’s using the node js library to authenticate a user. It receives and … --- ## [Pass additional params in id token](https://community.auth0.com/t/pass-additional-params-in-id-token/23527)
**Author:** [@HimachalLad](https://community.auth0.com/u/HimachalLad)\ **Replies:** 3\ **Last updated:** [April 9, 2019, 7:29pm UTC](https://community.auth0.com/t/pass-additional-params-in-id-token/23527 "2019-04-09T19:29:01Z")
I want to pass a user hashcode as part of login and signup in id token. I noticed that additional info can be passed through db connection signup to id token using user metadata but that is not possible for db connectio… --- ## [Non Interactive Client on Enduser server - how to auth?](https://community.auth0.com/t/non-interactive-client-on-enduser-server-how-to-auth/9830)
**Author:** [@bala.nemate](https://community.auth0.com/u/bala.nemate)\ **Replies:** 1\ **Last updated:** [December 17, 2018, 4:57pm UTC](https://community.auth0.com/t/non-interactive-client-on-enduser-server-how-to-auth/9830 "2018-12-17T16:57:50Z")
It is all clear how to authorize Non Interactive Client (NIC) which is running on our backend server - use Client Credentials Grant. But we have third party NIC running on end user’s backend. Since it is NIC, there is n… --- ## [Unable to decode id\_token for getting aws credentials](https://community.auth0.com/t/unable-to-decode-id-token-for-getting-aws-credentials/9605)
**Author:** [@vbezawada](https://community.auth0.com/u/vbezawada)\ **Replies:** 1\ **Last updated:** [December 17, 2018, 3:50pm UTC](https://community.auth0.com/t/unable-to-decode-id-token-for-getting-aws-credentials/9605 "2018-12-17T15:50:46Z")
I am trying to do auth0 aws sso,I am getting a id\_token when user is successfully authenticated. but for getting aws credentials the id\_token need to be decoded with auth0 delegation endpoint.But when I am trying to do… --- ## [Claims missing from ID token after signup](https://community.auth0.com/t/claims-missing-from-id-token-after-signup/7878)
**Author:** [@rmaurer](https://community.auth0.com/u/rmaurer)\ **Replies:** 4\ **Last updated:** [January 20, 2018, 1:01am UTC](https://community.auth0.com/t/claims-missing-from-id-token-after-signup/7878 "2018-01-20T01:01:54Z")
I have Auth0 implemented in my Angular JS 1.5 app and it is working for my Google users and my userid/password users. When the user logs in, I have a rule that adds their custom claims to their id token, and then in my … --- ## [401 when calling API (Spring) in a SPA (AngularJS)](https://community.auth0.com/t/401-when-calling-api-spring-in-a-spa-angularjs/9188)
**Author:** [@daniel.steger](https://community.auth0.com/u/daniel.steger)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 9:44pm UTC](https://community.auth0.com/t/401-when-calling-api-spring-in-a-spa-angularjs/9188 "2018-01-17T21:44:53Z")
In my AngularJS SPA, the Implicit Grant flow is used. When a user logs in, the SPA gets an id\_token and an access\_token. When the SPA calls a simple Spring API that is protected, the header is set with the access\_token (… --- ## [Setting scope in access\_token breaks id\_token](https://community.auth0.com/t/setting-scope-in-access-token-breaks-id-token/8965)
**Author:** [@gunnar.velle](https://community.auth0.com/u/gunnar.velle)\ **Replies:** 1\ **Last updated:** [December 21, 2017, 9:21pm UTC](https://community.auth0.com/t/setting-scope-in-access-token-breaks-id-token/8965 "2017-12-21T21:21:02Z")
I have a single page application and a backend application both registered as clients in Auth0. The SPA uses implicit grant to get id\_token and access\_token from Auth0. Kong validates the access\_token and sends the requ… --- ## [Generate id\_token](https://community.auth0.com/t/generate-id-token/8845)
**Author:** [@joe1](https://community.auth0.com/u/joe1)\ **Replies:** 1\ **Last updated:** [November 29, 2017, 5:15pm UTC](https://community.auth0.com/t/generate-id-token/8845 "2017-11-29T17:15:28Z")
Is there a way to obtain id\_token programatically? The purpose is to test our API..flow is : front-end uses Auth0 to get an id\_token then we are using delegation to get AWS tokens. [Next page](https://community.auth0.com/tag/id-token/95.md?match_all_tags=true&page=1&tags%5B%5D=id_token)