Handling id_token in ASP.NET Core API

user_1705266 0
Viewed 797

I'm implementing Auth0 with my ASP.NET Core 2.1 app with React front end.

After the user authenticates, I do get both an access_token and an id_token. I'm clear that I send the access_token in the header to gain access to my API methods but I'm not sure how to handle the id_token.

Do I place the id_token in the header as well? If so, what key do I use for it? I'm sending the access_token with the key Authorization -- see below. enter image description here

Not sure how to send the id_token and would appreciate some pointers on this. Thanks.

jwt auth0 asp.net-core reactjs authentication
1 Answers

You would use id_token to construct the User object in SPA application and access_token is used to access the API. So, you don't put the id_token in the header.

There is a JavaScript library for Auth0 that can help with authentication/authorization tasks: Auth0.js.

The library may help with constructing the user object and refreshing the access token.

user_22917480
Related