# \#scope **URL:** https://community.auth0.com/tag/scope/503.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Scope not available in access token](https://community.auth0.com/t/scope-not-available-in-access-token/93460)
**Author:** [@ketanLmq](https://community.auth0.com/u/ketanLmq)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 11:55pm UTC](https://community.auth0.com/t/scope-not-available-in-access-token/93460 "2024-12-12T23:55:25Z")
When fetching the access\_token using oauth/token API, the decoded access\_token doesn’t contain the scope key-value pair. --- ## [How to add scope for specific application?](https://community.auth0.com/t/how-to-add-scope-for-specific-application/82068)
**Author:** [@selvi](https://community.auth0.com/u/selvi)\ **Replies:** 1\ **Last updated:** [April 22, 2022, 9:36pm UTC](https://community.auth0.com/t/how-to-add-scope-for-specific-application/82068 "2022-04-22T21:36:13Z")
Trying to get token to access management api refer the decoded token attached below. I am able to access management api using trail account , but facing issue in official account. Scope is not present in decoded token. H… --- ## [Insufficient scope, expected any of: read:roles](https://community.auth0.com/t/insufficient-scope-expected-any-of-read-roles/80955)
**Author:** [@selvi](https://community.auth0.com/u/selvi)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 3:54pm UTC](https://community.auth0.com/t/insufficient-scope-expected-any-of-read-roles/80955 "2022-04-04T15:54:41Z")
How to add scope for specific application via dashboard in auth0? Trying to get roles with permission using management library. But when hit it getting below error. Attached rule script below. Commented the code for per… --- ## [Preventing a Multiple Audiences Array](https://community.auth0.com/t/preventing-a-multiple-audiences-array/75327)
**Author:** [@jakub.tkac](https://community.auth0.com/u/jakub.tkac)\ **Replies:** 1\ **Last updated:** [December 23, 2021, 5:24pm UTC](https://community.auth0.com/t/preventing-a-multiple-audiences-array/75327 "2021-12-23T17:24:01Z")
Hi, We are currently developing a Vue SPA with help of the Auth0 SPA js SDK, which requests access tokens and sends them to our API. Our API utilizes AWS STS to receive short term credentials for accessing our data lay… --- ## [User scopes are not synced on connection](https://community.auth0.com/t/user-scopes-are-not-synced-on-connection/73263)
**Author:** [@ggabor93](https://community.auth0.com/u/ggabor93)\ **Replies:** 1\ **Last updated:** [December 6, 2021, 11:34am UTC](https://community.auth0.com/t/user-scopes-are-not-synced-on-connection/73263 "2021-12-06T11:34:57Z")
Hello Auth0 Community! I am using Auth0 as an IdP (let’s call it app1) for my application and I am also using Auth0 as authorization server (let’s call it app2). I created an OIDC enterprise connection to sync users bet… --- ## [Conditionally add scope based on Auth0 role](https://community.auth0.com/t/conditionally-add-scope-based-on-auth0-role/72761)
**Author:** [@emiel](https://community.auth0.com/u/emiel)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 6:29pm UTC](https://community.auth0.com/t/conditionally-add-scope-based-on-auth0-role/72761 "2021-11-08T18:29:38Z")
Hi there! Could you help me with the following. Currently our application (.NET Core API) is protected by using \[Authorize("myscope")\]. A small number of the users defined in our Auth0 tenant have a custom role, Manage… --- ## [Getting scope/permissions into my ID Token (explain it to me like I'm five)](https://community.auth0.com/t/getting-scope-permissions-into-my-id-token-explain-it-to-me-like-im-five/57827)
**Author:** [@tom15](https://community.auth0.com/u/tom15)\ **Replies:** 3\ **Last updated:** [February 19, 2021, 2:43pm UTC](https://community.auth0.com/t/getting-scope-permissions-into-my-id-token-explain-it-to-me-like-im-five/57827 "2021-02-19T14:43:08Z")
Hi all - I’m getting a bit frustrated. I have a react app that communicates with a GraphQL API (apollo running on express). My react app gets the user’s ID Token by logging in with the universal login. I then pass … --- ## [Flow: Password. Always receive all Scopes when User didin't have Permissions and Rôles](https://community.auth0.com/t/flow-password-always-receive-all-scopes-when-user-didint-have-permissions-and-roles/50138)
**Author:** [@msavard](https://community.auth0.com/u/msavard)\ **Replies:** 4\ **Last updated:** [September 23, 2020, 2:33pm UTC](https://community.auth0.com/t/flow-password-always-receive-all-scopes-when-user-didint-have-permissions-and-roles/50138 "2020-09-23T14:33:40Z")
Hi, I create my test unit and for test not Authorization User, I create a new User in Auth0 without Role. But when I run my test, the “Success Exchange” send all Scope value for my Application and not the Scope from Use… --- ## [Custom Scope/Permission in Access Token from SPA (ReactJS)](https://community.auth0.com/t/custom-scope-permission-in-access-token-from-spa-reactjs/49663)
**Author:** [@buzzpod](https://community.auth0.com/u/buzzpod)\ **Replies:** 1\ **Last updated:** [September 13, 2020, 10:56pm UTC](https://community.auth0.com/t/custom-scope-permission-in-access-token-from-spa-reactjs/49663 "2020-09-13T22:56:28Z")
I have setup a ReactJS SPA with a Python Flask backend. Both are registered via the auth0 dashboard and I was succesfully able to have a user login and authenticate with auth0 then request an access token from auth0 in o… --- ## [Scope jwt token with SpringBoot](https://community.auth0.com/t/scope-jwt-token-with-springboot/44809)
**Author:** [@kmaeng](https://community.auth0.com/u/kmaeng)\ **Replies:** 2\ **Last updated:** [June 17, 2020, 12:03pm UTC](https://community.auth0.com/t/scope-jwt-token-with-springboot/44809 "2020-06-17T12:03:51Z")
Hi, I’m an newbie. I’m trying to test authorization with SpringBoot. I followed up this example(Java Springboot API - Auth0 Docs). But there is some issue that I can’t find scope values with ‘read:messages’. I can se… --- ## [How to define Scope on API login using Machine to Machine app](https://community.auth0.com/t/how-to-define-scope-on-api-login-using-machine-to-machine-app/20278)
**Author:** [@davidr1](https://community.auth0.com/u/davidr1)\ **Replies:** 1\ **Last updated:** [January 22, 2019, 12:29pm UTC](https://community.auth0.com/t/how-to-define-scope-on-api-login-using-machine-to-machine-app/20278 "2019-01-22T12:29:27Z")
I’m implementing an authentication challenge in an Apple Business Chat conversation I’m using a Machine to Machine app with the management API. Apple calls the authorize endpoint with the client ID of my Auth0 App - t… --- ## [What's the best practice to handle metadata?](https://community.auth0.com/t/whats-the-best-practice-to-handle-metadata/9866)
**Author:** [@pierre.h](https://community.auth0.com/u/pierre.h)\ **Replies:** 2\ **Last updated:** [May 17, 2018, 2:19am UTC](https://community.auth0.com/t/whats-the-best-practice-to-handle-metadata/9866 "2018-05-17T02:19:20Z")
Hi, I am creating a multi-tenant app based on a SPA (Angular) + Node.js back-end + Auth0. I would like my app to exchange user info with Auth0. Based on conversation here, I have creating a rule to add metadata to toke… --- ## [Auth0 Application API Quckstart Doesn't Work - Missing Scopes](https://community.auth0.com/t/auth0-application-api-quckstart-doesnt-work-missing-scopes/11205)
**Author:** [@gtb](https://community.auth0.com/u/gtb)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 6:06pm UTC](https://community.auth0.com/t/auth0-application-api-quckstart-doesnt-work-missing-scopes/11205 "2018-12-18T18:06:20Z")
Hi, I’ve got the authentication quick start working for my React SPA and that all works fine. The next step is securing my web api layer. I download the API quickstart, which comes with my details pre-loaded e.g. audie… --- ## [Cannot return required scope](https://community.auth0.com/t/cannot-return-required-scope/9485)
**Author:** [@seqq86](https://community.auth0.com/u/seqq86)\ **Replies:** 4\ **Last updated:** [February 15, 2018, 3:57pm UTC](https://community.auth0.com/t/cannot-return-required-scope/9485 "2018-02-15T15:57:07Z")
Hi, I use non-OIDC authentication and I am requesting scope user\_metadata. Also I have rule: function (user, context, callback) { user.user\_metadata = user.user\_metadata || {}; user.user\_metadata.signu… --- ## [Access Token scope issue](https://community.auth0.com/t/access-token-scope-issue/9107)
**Author:** [@mdka.dasd](https://community.auth0.com/u/mdka.dasd)\ **Replies:** 4\ **Last updated:** [January 3, 2018, 9:14pm UTC](https://community.auth0.com/t/access-token-scope-issue/9107 "2018-01-03T21:14:47Z")
I’ve been struggling with auth-js bundle trying to get an access token with the following scopes: read:usersand read:user\_idp\_tokens as mentioned on this answer and using audience: YOUR\_AUTH0\_DOMAIN/userinfo as document… --- ## [Setting scope in access\_token breaks id\_token](https://community.auth0.com/t/setting-scope-in-access-token-breaks-id-token/8965)
**Author:** [@gunnar.velle](https://community.auth0.com/u/gunnar.velle)\ **Replies:** 1\ **Last updated:** [December 21, 2017, 9:21pm UTC](https://community.auth0.com/t/setting-scope-in-access-token-breaks-id-token/8965 "2017-12-21T21:21:02Z")
I have a single page application and a backend application both registered as clients in Auth0. The SPA uses implicit grant to get id\_token and access\_token from Auth0. Kong validates the access\_token and sends the requ… --- ## [Scope description is not used in the consent dialog](https://community.auth0.com/t/scope-description-is-not-used-in-the-consent-dialog/9023)
**Author:** [@Yonezawa-T2](https://community.auth0.com/u/Yonezawa-T2)\ **Replies:** 1\ **Last updated:** [December 19, 2017, 5:09pm UTC](https://community.auth0.com/t/scope-description-is-not-used-in-the-consent-dialog/9023 "2017-12-19T17:09:37Z")
The description of scopes is not shown in the consent dialog, but auto-generated description “{verb} your {noun}” is used. Can I change this behavior? For example, suppose we have a scope named “send:email” with descrip… --- ## [Scopes limit in access\_token for APIs](https://community.auth0.com/t/scopes-limit-in-access-token-for-apis/7532)
**Author:** [@dimitrovs](https://community.auth0.com/u/dimitrovs)\ **Replies:** 5\ **Last updated:** [July 18, 2017, 10:12pm UTC](https://community.auth0.com/t/scopes-limit-in-access-token-for-apis/7532 "2017-07-18T22:12:57Z")
In my Auth0 use case I have users & projects (many-to-many relationship). The projects a user has access to are stored in app\_metadata. On the API side I need one token (I suppose access\_token type) for every project a u… --- ## [Incremental scope authorization for Google](https://community.auth0.com/t/incremental-scope-authorization-for-google/6964)
**Author:** [@kgunturu](https://community.auth0.com/u/kgunturu)\ **Replies:** 1\ **Last updated:** [July 12, 2017, 9:39pm UTC](https://community.auth0.com/t/incremental-scope-authorization-for-google/6964 "2017-07-12T21:39:21Z")
I’m using Auth0 v8 and Angular. I’m trying to get offline access for additional scopes after the user is logged in. I only want to make this request for certain users and I do not want to login twice. --- ## [Insufficient scope error when calling authorization extension API for old client](https://community.auth0.com/t/insufficient-scope-error-when-calling-authorization-extension-api-for-old-client/7276)
**Author:** [@victoria.lavella](https://community.auth0.com/u/victoria.lavella)\ **Replies:** 3\ **Last updated:** [July 8, 2017, 2:02am UTC](https://community.auth0.com/t/insufficient-scope-error-when-calling-authorization-extension-api-for-old-client/7276 "2017-07-08T02:02:59Z")
Hello, I have a single page app client that I created in March. This week I tried to add a new client to my account and I find that due to a change in the API management I need to set realm-password grand types to my n… --- ## [Auth0 Lock React - Insufficient Scope](https://community.auth0.com/t/auth0-lock-react-insufficient-scope/6692)
**Author:** [@bruno.nonato](https://community.auth0.com/u/bruno.nonato)\ **Replies:** 1\ **Last updated:** [May 22, 2017, 4:19pm UTC](https://community.auth0.com/t/auth0-lock-react-insufficient-scope/6692 "2017-05-22T16:19:16Z")
I try update the current user email but the Auth0 API response returns 403 error with this payload: { "statusCode":403, "error":"Forbidden", "message":"You cannot update the following fields: email", "errorC…