grand-stack / grandstack.io

GRANDstack website
https://GRANDstack.io
18 stars 20 forks source link

Show how/where to add scope to your JWT. #42

Closed MuddyBootsCode closed 4 years ago

MuddyBootsCode commented 4 years ago

It would be great to have a list of scopes here i.e. read, write, edit, delete and what they would look like in your JWT. Right now this assumes that the reader will know what those scopes are. I know it may be kind of basic but a full example of this and how it works would be very helpful.

For instance in my Auth0 set up I have this in the user_metadata portion of the token:

{
  "scopes": [
    "read"
  ]
}

But in the example it's not clear if this is the correct place to add the scope or if it's even what the author intended. Might be nice to clarify a bit.