I’m trying to use JWT authentication for a REST AP...

# ktor

[kevin]

I’m trying to use JWT authentication for a REST API. I have the verifier running but I can’t get at the things I’d like to in the token, for example the scopes. If I look in the debugger I can see that the Payload is actually an Auth0 PayloadImpl. The Impl has a ‘tree’ property that has the data I need but this isn’t a public class so I can’t cast to it.

Am I missing something, is there a way to get at the scopes for example?

[fred.deschenes]

isn't the "scope" just in the claims?
decodedToken.getClaim("scope").asList(String.class); should work if I'm remembering this right

[fred.deschenes]

decodedToken being a DecodedJWT from auth0's lib

[kevin]

The claims are empty, as is the subject

[fred.deschenes]

well looking at the PayloadImpl class, the claims are loaded from 'tree' so that's weird

[zpearce]

this is what I do:

val Payload.scopes get() = this.getClaim("scope").asString().split(" ")

fun Payload.hasRequiredScope(scope: String) = this.scopes.contains(scope)

[kevin]

Thanks for you help guys. Turns out I was looking at the wrong thing or being an idiot or probably both. The claims are indeed there on the payload