Kinde•3w ago

Include API scopes in the permissions claim

I can not see option to include API scopes in the permissions claim: https://docs.kinde.com/developer-tools/your-apis/user-api-scopes/#include-api-scopes-in-the-permissions-claim. I can see only: Additional claims Feature flags (object) Include non user-specific feature flags in client_credentials token

10 Replies

Abdelrahman Zaki - Kinde•3w ago

Hi @mangapolska, thanks for reaching out. The option to "Include API scopes in the permissions claim" is definitely available. I’ve attached a screenshot for reference, you’ll find it under the Configuration section when customizing your access token. Let me know if you're still not seeing it on your end, happy to help further!

mangapolskaOP•3w ago

Is this option available only in Plus (and higher) plan?

Abdelrahman Zaki - Kinde•3w ago

Yes, the option to include API scopes in the permissions claim is available on the Plus plan and above. Let me know if you’d like any help upgrading or if you have more questions!

mangapolskaOP•3w ago

Do you have mayby free trial (30 days) for Plus plan? I would need to perform some checks on JWT claims settings and look & test carefully other Kinde features on this plan. We are considering (company, where I am employed) Kinde as auth provider and for now everything looks promising. Meantime, could you kindly provide example how JWT looks (snippet) in M2M auth flow (Client Credentials) where API scopes are included in permissions claim?

Abdelrahman Zaki - Kinde•3w ago

Hi @mangapolska, thanks for the follow-up! I’ll check in with our billing team on what we can offer in terms of a free trial for the Plus plan. Just a heads-up, as we're heading into the weekend, I may not hear back until Monday, but I’ll let you know as soon as I do. In the meantime, I’ll also share an example of a JWT from the M2M auth flow showing how API scopes appear in the permissions claim. Let me know if there’s anything else you’d like to explore! Hi @mangapolska, As promised, here’s a sample JWT from the M2M (client credentials) auth flow where API scopes are included in the permissions claim:

{
  aud: [ 'https://abdelrahmanzakii.kinde.com/api' ],
  azp: '2edb8ce181224a79a02cc5ac6a053bff',
  exp: 1754754515,
  gty: [ 'client_credentials' ],
  iat: 1754668115,
  iss: 'https://abdelrahmanzakii.kinde.com',
  jti: '5b949548-9476-4ad1-bd61-7c8df6d280f1',
  permissions: [
    'update:user_properties',
    'read:users',
    'read:user_properties',
    'create:portal_url'
  ],
  scp: [],
  v: '2'
}

{
  aud: [ 'https://abdelrahmanzakii.kinde.com/api' ],
  azp: '2edb8ce181224a79a02cc5ac6a053bff',
  exp: 1754754515,
  gty: [ 'client_credentials' ],
  iat: 1754668115,
  iss: 'https://abdelrahmanzakii.kinde.com',
  jti: '5b949548-9476-4ad1-bd61-7c8df6d280f1',
  permissions: [
    'update:user_properties',
    'read:users',
    'read:user_properties',
    'create:portal_url'
  ],
  scp: [],
  v: '2'
}

Really glad to hear you're evaluating Kinde, if you run into anything or have questions along the way, feel free to share. I’m happy to help with a workaround or fix wherever possible. Let me know how you go! Hi @mangapolska, just a quick update, someone from our team will reach out to you early next week regarding a free trial for the Plus plan.

Patrick•3w ago

Hey mangapolska,

Thanks for reaching out about Kinde's API scopes feature.
I can definitely arrange a trial of the Plus plan.

To proceed with this, let's move to email to continue the discussion on this.
Are you able provide an email address I can continue the conversation on this with?

Looking forward to hearing from you.

mangapolskaOP•3w ago

Please drop your @kinde.com address. I will send you an email.

Patrick•3w ago

Hey mangapolska,
My email address is: oliver.wolff@kinde.com
Looking forward to hearing from you.

mangapolskaOP•2w ago

I will drop an email possibly tomorrow. Anyway, why Kinde is not here? 😅 https://oauth.net/code/ #Commercial

Patrick•2w ago

Looking forward to hearing from you.

Good catch - I just raised a PR to add a link to Kinde: https://github.com/aaronpk/oauth.net/pull/374

Thanks for raising this

Gaming

Programming

Include API scopes in the permissions claim

Did you find this page helpful?