User Access

Introduction: User Access

User Access is managed by JWT tokens that are issued by the CRBN Elements Auth0 Instance.

They have several requirements.

JWT Token Requirements

These JWT tokens have the following requirements:

Issuer
- The issuer must be: https://crbnelements.us.auth0.com/
Sub
- The SUB MUST be the Auth0 User ID, e.g. google-oauth2|103699938906199991998
Audience
- The audience must include: https://api.cephisso.dev/
Scope:
- The scope MUST include: jwt.dev.cephisso.api
Permissions
- It MUST include: jwt.dev.cephisso.api

Well formed JWT snippet.

{
  "iss": "https://crbnelements.us.auth0.com/",
  "sub": "google-oauth2|103699938906179001998",
  "aud": [
    "https://api.cephisso.dev/",
    "https://crbnelements.us.auth0.com/userinfo"
  ],
  "iat": 1722105522,
  "exp": 1722191922,
  "scope": "openid profile email jwt.dev.cephisso.api",
  "azp": "REnfE8GPaqR0wrdg2UB9pq2zy5ygvT3W",
  "permissions": [
    "jwt.dev.cephisso.api"
  ]
}