How to add JWT authorization with Auth0 to a serverless API

Chapter Comments
1

Link to chapter — https://serverless-stack.com/examples/how-to-add-jwt-authorization-with-auth0-to-a-serverless-api.html

2

How can I retrieve the user object from auth0 on the lambda side of the API? As far as I can see, I only have the JWT scopes and payload.

3

You’ll need to fetch it making a GET call to the /userinfo endpoint, forwarding your bearer token in the authorization header.

curl --url https://YOUR_DOMAIN.auth0.com/userinfo -H "Authorization: Bearer YOUR_TOKEN"

If you also need to get the user_metadata and/or app_metadata, here is how you can achieve that: Auth0: how to include app_metadata in user info

4

Why are arrays converted to strings without comma delimitation when the JWT is decoded?
image