#BuiltMyL5: OAuth · SimplifyIAM

11d (edited) • Wins

#BuiltMyL5: OAuth

Interesting one. Done with the OAuth 2.0 M2M lab with Auth0. I executed the Client Credentials flow and decoded the access token. Here is an extra step, in case you experience the same problem: please you need to turn on RBAC on the API and give the app the permission before read:invoices show in the token. If you do not, the permissions list comes back empty. Please check the screenshot for more clarity.

Just for your References:

Enable Role-Based Access Control for APIs : https://auth0.com/docs/get-started/apis/enable-role-based-access-control-for-apis

Adding RBAC Permissions to Access Tokens : https://support.auth0.com/center/s/article/Adding-RBAC-Permissions-to-Access-Tokens

2 comments

#BuiltMyL5: OAuth