JWT Access Token - Custom Audience

[the133448]

We have noticed that the Access Token being generated is not in the form of a JWT Token, it is a much shorter Opaque token, which whilst able to access the userinfo endpoint, is not able to access a custom API we have added to Auth0.

To fix this I believe we need to adjust the audience field that this plugin is creating, in particular here . If we add our custom API here, then I believe Auth0 would return a access token in the form of a JWT token, but still have access to the user management API in the audience field.

Is our thinking correct? If so, is it possible to make the audience here configurable?

Or is there already a configurable to add a custom Audience to ensure we get back a JWT Token

[the133448]

Update, I have discovered in Auth0 Tenant Settings > API Authorization Settings, there is the ability to declare a Default Audience which correctly returns the JWT token. However this applies to all my applications, there could be a use case where we just want to request this audience for just the WP plugin application.

So, perhaps let me update this feature request to make it configurable to request multiple audiences?

[evansims]

Hey @the133448 👋 Thanks for reporting this; I'm out on holiday this week but I'll take a look at this as soon as I can when I return. (Sorry not to have anything to report yet, just didn't want to leave you hanging.)

[cocojoe]

@the133448 is this still something you need advice on? Thanks

[evansims]

Going to close this for now as it's gone stale; let us know if this is still an issue for you, and we can re-open.

[the133448]

Hi @evansims , we ran into this again, we have multiple applications now so ideally we don't want to use the Default Audience under the tenant settings as this impacts our other applications.

[the133448]

HI @evansims would you be able to reopen this?

[evansims]

Hi @the133448 👋 Thanks for the update. Support for multiple audiences is on our radar for the next major release, but we don't currently have a timetable for this that I can offer