# \#scopes **URL:** https://community.auth0.com/tag/scopes/169.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [OAuth 2.0 Access Tokens and the Principle of Least Privilege](https://community.auth0.com/t/oauth-2-0-access-tokens-and-the-principle-of-least-privilege/189310)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\ **Replies:** 1\ **Last updated:** [July 17, 2025, 10:43am UTC](https://community.auth0.com/t/oauth-2-0-access-tokens-and-the-principle-of-least-privilege/189310 "2025-07-17T10:43:23Z")
How can you apply the Principle of Least Privilege when using OAuth 2.0 access tokens to protect your applications? Learn more through this blog post. --- ## [Scope not available in access token](https://community.auth0.com/t/scope-not-available-in-access-token/93460)
**Author:** [@ketanLmq](https://community.auth0.com/u/ketanLmq)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 11:55pm UTC](https://community.auth0.com/t/scope-not-available-in-access-token/93460 "2024-12-12T23:55:25Z")
When fetching the access\_token using oauth/token API, the decoded access\_token doesn’t contain the scope key-value pair. --- ## [Unable to create custom claim with special character in the claim name](https://community.auth0.com/t/unable-to-create-custom-claim-with-special-character-in-the-claim-name/109670)
**Author:** [@venkatasandeep.kolis](https://community.auth0.com/u/venkatasandeep.kolis)\ **Replies:** 2\ **Last updated:** [June 21, 2023, 6:39pm UTC](https://community.auth0.com/t/unable-to-create-custom-claim-with-special-character-in-the-claim-name/109670 "2023-06-21T18:39:16Z")
I am trying to create an access token with a custom claim with a special character in the claim name(ex: user\_email) but I see the generated token is not taking up the claim. but I was successful with a special characte… --- ## [Is there a way to update the m2m access token so that the scopes are an array rather than a string](https://community.auth0.com/t/is-there-a-way-to-update-the-m2m-access-token-so-that-the-scopes-are-an-array-rather-than-a-string/93533)
**Author:** [@paul10](https://community.auth0.com/u/paul10)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 7:06pm UTC](https://community.auth0.com/t/is-there-a-way-to-update-the-m2m-access-token-so-that-the-scopes-are-an-array-rather-than-a-string/93533 "2022-11-03T19:06:39Z")
This is related to this request which I saw was closed - Change the scope from string to array format in access token. I have the same issue and was wondering if there is a way. We have an integration partner who require… --- ## [Adding additional scopes to the Google Workspace connection setup](https://community.auth0.com/t/adding-additional-scopes-to-the-google-workspace-connection-setup/91689)
**Author:** [@dmitry2](https://community.auth0.com/u/dmitry2)\ **Replies:** 1\ **Last updated:** [October 10, 2022, 9:18pm UTC](https://community.auth0.com/t/adding-additional-scopes-to-the-google-workspace-connection-setup/91689 "2022-10-10T21:18:56Z")
Hi! I’m trying to implement a Google Workspace connection, with custom scopes. The logic of my application is as follows: All users log in through Google Workspace connection, and then there is a separate page for the … --- ## [How to add user permissions to ID token](https://community.auth0.com/t/how-to-add-user-permissions-to-id-token/88714)
**Author:** [@aaron.hardy](https://community.auth0.com/u/aaron.hardy)\ **Replies:** 6\ **Last updated:** [September 20, 2022, 1:57am UTC](https://community.auth0.com/t/how-to-add-user-permissions-to-id-token/88714 "2022-09-20T01:57:20Z")
Hey community. From our single-page application, we want to know the current user’s permission so we can control access to certain sections or buttons of our app. We’re using organizations. As you’re probably aware, per… --- ## [Auth0 scope with Angular application](https://community.auth0.com/t/auth0-scope-with-angular-application/89570)
**Author:** [@Jaydeeps03](https://community.auth0.com/u/Jaydeeps03)\ **Replies:** 4\ **Last updated:** [September 12, 2022, 5:47pm UTC](https://community.auth0.com/t/auth0-scope-with-angular-application/89570 "2022-09-12T17:47:53Z")
Hi Team, I am exploring Auth0 SDK for angular application. I have created one SPA and API with ‘Machine to Machine’ configuration. I have added couple of scopes in API and same are allowed from SPA application from auth… --- ## [Adding Additional Scopes in a Rule](https://community.auth0.com/t/adding-additional-scopes-in-a-rule/89374)
**Author:** [@mike.edwards](https://community.auth0.com/u/mike.edwards)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 10:13pm UTC](https://community.auth0.com/t/adding-additional-scopes-in-a-rule/89374 "2022-08-25T22:13:49Z")
I have a rule to add a custom scope if a certain condition is met, the code looks like this: function (user, context, callback) { if(something == true){ var scopes = context.accessToken.scope ? context.ac… --- ## [Updating Application Scopes via API](https://community.auth0.com/t/updating-application-scopes-via-api/88113)
**Author:** [@jesusperezmarin](https://community.auth0.com/u/jesusperezmarin)\ **Replies:** 1\ **Last updated:** [August 8, 2022, 7:17pm UTC](https://community.auth0.com/t/updating-application-scopes-via-api/88113 "2022-08-08T19:17:30Z")
Hi everyone, I am currently involved on the implementation of the Auth0 CLI. So far so good, application created, CLI exported, CICD pipeline implemented and it successfully imports the CLI for the tenant(s) However, t… --- ## [Can't get token with update:users scope](https://community.auth0.com/t/cant-get-token-with-update-users-scope/68949)
**Author:** [@enes](https://community.auth0.com/u/enes)\ **Replies:** 7\ **Last updated:** [June 23, 2022, 6:42am UTC](https://community.auth0.com/t/cant-get-token-with-update-users-scope/68949 "2022-06-23T06:42:34Z")
I have a Auth0 management api v2 for single page application (React.js). I m trying to implement link-identities but it always return 401 UnAuthorized response. Here is my request : Request url : https://domain/api/v2… --- ## [Scopes added during login aren't appearing in access token](https://community.auth0.com/t/scopes-added-during-login-arent-appearing-in-access-token/83755)
**Author:** [@illusionfactory](https://community.auth0.com/u/illusionfactory)\ **Replies:** 3\ **Last updated:** [May 21, 2022, 1:04am UTC](https://community.auth0.com/t/scopes-added-during-login-arent-appearing-in-access-token/83755 "2022-05-21T01:04:48Z")
Hello out there! I’m using SDK auth0/nextjs-auth0 ^1.7.0 in a nextjs app. In handle login, the scope ‘read:organizations’ is added. await handleLogin(req, res, { authorizationParams: { audience:… --- ## [Newly added scopes on machine to machine api calls missing](https://community.auth0.com/t/newly-added-scopes-on-machine-to-machine-api-calls-missing/81769)
**Author:** [@dchoi](https://community.auth0.com/u/dchoi)\ **Replies:** 3\ **Last updated:** [April 14, 2022, 7:39pm UTC](https://community.auth0.com/t/newly-added-scopes-on-machine-to-machine-api-calls-missing/81769 "2022-04-14T19:39:23Z")
I have a machine client app calling into an api. This app is authorized for the api and both the api and the app are having the new scopes (as well as some older scopes). On the api side I have some code that looks at th… --- ## [Twitch user:edit scope](https://community.auth0.com/t/twitch-user-edit-scope/79347)
**Author:** [@noobpanda](https://community.auth0.com/u/noobpanda)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 7:36pm UTC](https://community.auth0.com/t/twitch-user-edit-scope/79347 "2022-03-10T19:36:09Z")
Hello I’m using the Twitch connection but unfortunately it locks the user:edit scope. I’m not using this scope and it alarms my users that I’m getting this permissions for their accounts. Any way to bypass this other … --- ## [Jwt missing scope](https://community.auth0.com/t/jwt-missing-scope/77558)
**Author:** [@g.padres](https://community.auth0.com/u/g.padres)\ **Replies:** 8\ **Last updated:** [February 4, 2022, 9:13pm UTC](https://community.auth0.com/t/jwt-missing-scope/77558 "2022-02-04T21:13:12Z")
Hi, We are creating staging environments, and while replicating our dev environment (with corresponding Auth0 tenant) we noticed that requested scopes were not being present in the JWT (as in our dev env). We’ve done re… --- ## [User scopes are not synced on connection](https://community.auth0.com/t/user-scopes-are-not-synced-on-connection/73263)
**Author:** [@ggabor93](https://community.auth0.com/u/ggabor93)\ **Replies:** 1\ **Last updated:** [December 6, 2021, 11:34am UTC](https://community.auth0.com/t/user-scopes-are-not-synced-on-connection/73263 "2021-12-06T11:34:57Z")
Hello Auth0 Community! I am using Auth0 as an IdP (let’s call it app1) for my application and I am also using Auth0 as authorization server (let’s call it app2). I created an OIDC enterprise connection to sync users bet… --- ## [How to add client scopes and validate them for each login?](https://community.auth0.com/t/how-to-add-client-scopes-and-validate-them-for-each-login/68599)
**Author:** [@enam](https://community.auth0.com/u/enam)\ **Replies:** 3\ **Last updated:** [August 30, 2021, 8:38am UTC](https://community.auth0.com/t/how-to-add-client-scopes-and-validate-them-for-each-login/68599 "2021-08-30T08:38:07Z")
I am migrating my application from identity server to support Auth0. I can’t find how can I define client’s available scopes and every time when user tries to login validate whether that client application has access to … --- ## [Auth0 JWT doesn't have requested API Scopes](https://community.auth0.com/t/auth0-jwt-doesnt-have-requested-api-scopes/68046)
**Author:** [@vinayvinay](https://community.auth0.com/u/vinayvinay)\ **Replies:** 9\ **Last updated:** [August 20, 2021, 8:52pm UTC](https://community.auth0.com/t/auth0-jwt-doesnt-have-requested-api-scopes/68046 "2021-08-20T20:52:20Z")
Hello, I’m trying to use scopes for my APIs and the JWT returned by Auth0 doesn’t seem to have the requested scopes. I searched around a whole bunch but couldn’t find an answer. I did the following: Created a new API, … --- ## [Error from handleRedirectCallback: ID token is required but missing](https://community.auth0.com/t/error-from-handleredirectcallback-id-token-is-required-but-missing/67369)
**Author:** [@aartiles](https://community.auth0.com/u/aartiles)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 12:32pm UTC](https://community.auth0.com/t/error-from-handleredirectcallback-id-token-is-required-but-missing/67369 "2021-08-09T12:32:03Z")
Hello, I’m new to Auth0 and I’m trying to migrate our legacy custom-developed authentication flow to Auth0. I’m developing a PoC using the auth0/auth0-spa-js SDK following the tutorial at Auth0 JavaScript SDK Quickstar… --- ## [Organization and permissions](https://community.auth0.com/t/organization-and-permissions/65588)
**Author:** [@roneny](https://community.auth0.com/u/roneny)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 3:57pm UTC](https://community.auth0.com/t/organization-and-permissions/65588 "2021-07-06T15:57:51Z")
Hi, When I set my single page application to use “Team members of an organization” in the organization tab I stop receiving the permissions in the token after the login. When it being set to “Both” or “Individuals for p… --- ## [Two social (GitHub) connections for different scopes](https://community.auth0.com/t/two-social-github-connections-for-different-scopes/64620)
**Author:** [@martincura](https://community.auth0.com/u/martincura)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 10:22pm UTC](https://community.auth0.com/t/two-social-github-connections-for-different-scopes/64620 "2021-06-22T22:22:15Z")
Hi! This seems to me like it could be a common problem but i have found no solution :slightly\_frowning\_face: , sorry if there’s a similar thread because i couldn’t find it! Basically the problem boils down to having 2 … --- ## [How to get access token with all the scopes enabled?](https://community.auth0.com/t/how-to-get-access-token-with-all-the-scopes-enabled/64192)
**Author:** [@wahiduzzamankhan007](https://community.auth0.com/u/wahiduzzamankhan007)\ **Replies:** 3\ **Last updated:** [June 10, 2021, 4:33pm UTC](https://community.auth0.com/t/how-to-get-access-token-with-all-the-scopes-enabled/64192 "2021-06-10T16:33:00Z")
Hello everyone. I am trying to get access token for management api using curl. I am getting the token too. But it only have these scopes: read:prompts update:prompts read:branding update:branding delete:branding, while … --- ## [AccessTokenError: Could not retrieve an access token with scopes "openid profile email"](https://community.auth0.com/t/accesstokenerror-could-not-retrieve-an-access-token-with-scopes-openid-profile-email/61745)
**Author:** [@brandon.bachrach](https://community.auth0.com/u/brandon.bachrach)\ **Replies:** 17\ **Last updated:** [May 4, 2021, 4:12pm UTC](https://community.auth0.com/t/accesstokenerror-could-not-retrieve-an-access-token-with-scopes-openid-profile-email/61745 "2021-05-04T16:12:18Z")
I’ve created a NextJS app and API and have used Auth0 to both manage users and secure the API endpoints. I am only using Email/Password authentication. I had everything working properly but now I am getting the error “Ac… --- ## [Auth0 Angular with proxy config settings](https://community.auth0.com/t/auth0-angular-with-proxy-config-settings/62086)
**Author:** [@hantsy](https://community.auth0.com/u/hantsy)\ **Replies:** 3\ **Last updated:** [May 5, 2021, 11:13am UTC](https://community.auth0.com/t/auth0-angular-with-proxy-config-settings/62086 "2021-05-05T11:13:53Z")
Auth0 Angular 1.4.1 NodeJS 16 Angular 11 The code codes can be found from my Github account, the codes are based on this auth0 blog. Check my example from the following repo: I am trying to use a proxy config to… --- ## [Changing scope descriptions for openId and offline\_access](https://community.auth0.com/t/changing-scope-descriptions-for-openid-and-offline-access/59123)
**Author:** [@arthuston-abacus](https://community.auth0.com/u/arthuston-abacus)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 11:08pm UTC](https://community.auth0.com/t/changing-scope-descriptions-for-openid-and-offline-access/59123 "2021-03-10T23:08:35Z")
We are using the new universal login screen, can we control the text that is displayed for each of the scopes, we want them to be human-readable. Some of the scopes will be in the normal formats, e.g. ‘read:’, ‘update:’… --- ## [Specifying scope before calling loginWithRedirect()](https://community.auth0.com/t/specifying-scope-before-calling-loginwithredirect/58521)
**Author:** [@nwardcc](https://community.auth0.com/u/nwardcc)\ **Replies:** 6\ **Last updated:** [March 1, 2021, 9:03pm UTC](https://community.auth0.com/t/specifying-scope-before-calling-loginwithredirect/58521 "2021-03-01T21:03:54Z")
I have written a SPA using node react with a view to handling our client data within auth0. The app is working however to allow access to the metadata I am currently calling getAccessTokenSilently() with the scope set t… --- ## [Displaying multi-word scopes](https://community.auth0.com/t/displaying-multi-word-scopes/58316)
**Author:** [@arthuston-abacus](https://community.auth0.com/u/arthuston-abacus)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 9:27pm UTC](https://community.auth0.com/t/displaying-multi-word-scopes/58316 "2021-02-24T21:27:14Z")
We have multi-word scopes, similar to: Name Description read:foo-bars Read foo bars write:foo-bars Write foo bars read:foo\_baz Read foo baz write:foo\_baz Writ… --- ## [Scopes are missing?](https://community.auth0.com/t/scopes-are-missing/58143)
**Author:** [@wahmed](https://community.auth0.com/u/wahmed)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 12:58pm UTC](https://community.auth0.com/t/scopes-are-missing/58143 "2021-02-23T12:58:14Z")
We were using the scope \[‘email’, ‘openid’ ,‘profile’\] in auth0 rules. Is there anything that happened that this information is not present in the id token? It was working earlier but all of the sudden email information… --- ## [Additional scopes in a custom login page](https://community.auth0.com/t/additional-scopes-in-a-custom-login-page/55889)
**Author:** [@mark.hall](https://community.auth0.com/u/mark.hall)\ **Replies:** 7\ **Last updated:** [January 13, 2021, 12:42pm UTC](https://community.auth0.com/t/additional-scopes-in-a-custom-login-page/55889 "2021-01-13T12:42:58Z")
How do I add additional scopes in a custom login template? I have based our page on the ‘Custom Login Form’ template and need to add a Google scope not in the Social Connections list. When using the default login, this … --- ## [Assigning permissions (scopes) to different API endpoints for different types of users](https://community.auth0.com/t/assigning-permissions-scopes-to-different-api-endpoints-for-different-types-of-users/53331)
**Author:** [@ahsath](https://community.auth0.com/u/ahsath)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 2:35pm UTC](https://community.auth0.com/t/assigning-permissions-scopes-to-different-api-endpoints-for-different-types-of-users/53331 "2020-11-17T14:35:01Z")
Howdy folks, Imagine I’ve got two endpoints: 1. /users 2. /users/{userId} these permissions (scopes): 1. create:users 2. update:users and this custom access token claim: { "https://example.com/admin": true } Now… --- ## [Retrieve newly added user scope without user re-authorize](https://community.auth0.com/t/retrieve-newly-added-user-scope-without-user-re-authorize/50174)
**Author:** [@flegald](https://community.auth0.com/u/flegald)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 8:20am UTC](https://community.auth0.com/t/retrieve-newly-added-user-scope-without-user-re-authorize/50174 "2020-09-22T08:20:02Z")
Hello Auth0 Forums I have an instance where a user is given a new role after they are authorized in the SPA. My goal is to update the JWT token cached inside the application without having the user logout and log back … [Next page](https://community.auth0.com/tag/scopes/169.md?match_all_tags=true&page=1&tags%5B%5D=scopes)