Skip to content

fix(auth): support Auth0/OIDC namespaced custom role claims in JWT decoding #1855

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
MuzzaiyyanHussain wants to merge 4 commits into
base: master
Choose a base branch
from
Open

fix(auth): support Auth0/OIDC namespaced custom role claims in JWT decoding #1855

MuzzaiyyanHussain wants to merge 4 commits into from

Conversation

@MuzzaiyyanHussain
Copy link

@MuzzaiyyanHussain MuzzaiyyanHussain commented Nov 12, 2025

Description

Fixes #1792 — Ensures Auth0 and other OIDC providers’ namespaced claims
(e.g. https://example.com/roles) are parsed into user_metadata.

Changes

  • Updated decodeJWT() in helpers.ts to detect and flatten namespaced claims.
  • Added test verifying roles are extracted correctly.

Impact

  • Developers can now access Auth0-style custom claims via user.user_metadata.roles.

Checklist
@MuzzaiyyanHussain MuzzaiyyanHussain requested review from a team as code owners November 12, 2025 08:18
@coveralls
Copy link

coveralls commented Nov 12, 2025 •
edited
Loading

Coverage Status

coverage: 95.367% (+13.8%) from 81.58%
when pulling 537756b on MuzzaiyyanHussain:fix-auth0-namespaced-claims
into 1371057 on supabase:master.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants

@MuzzaiyyanHussain @coveralls