Frontend React : Roles missing in token

Original message was deleted

TTriHardNoob Created the cloud account, Organisation, Project, User, Role, Grant and Applica...

FFO•8/19/24, 1:50 PM

Hey, can you share the config in react you use?

I think you might be missing the scope urn:zitadel:iam:org:projects:rolesurn:zitadel:iam:org:projects:roles

TTriHardNoob ``` zitadel-react$ git diff diff --git a/src/App.tsx b/src/App.tsx index 5bf6da1...

FFO•8/19/24, 3:50 PM

ok so lets add the scope here and see how it goes

TTriHardNoob ``` $ git diff diff --git a/src/App.tsx b/src/App.tsx index 5bf6da1..8d5e1d3 100...

FFO•8/19/24, 3:54 PM

Yes, but I guess you need to add openid email profile urn:zitadel:iam:org:projects:rolesopenid email profile urn:zitadel:iam:org:projects:roles

jesperwe•8/21/24, 9:51 AM

I am facing exactly the same issue. Adding urn:zitadel:iam:org:projects:rolesurn:zitadel:iam:org:projects:roles to the scope does not fix it, there are still no roles in the ID Token or in the Access Token, despite both being enabled in the App settings.

fabienne•8/21/24, 2:08 PM

does the user have roles in the project of the app which initiates the oidc auth request?

Ffabienne does the user have roles in the project of the app which initiates the oidc auth...

jesperwe•8/21/24, 2:12 PM

Yes. "leads" is the project of the app with the Client ID that I use for the OIDC client

fabienne•8/21/24, 2:24 PM

I quickly tested this myself, and got it running.

fabienne•8/21/24, 2:24 PM

can you check if the assert roles on authentication is enabled on the project?

fabienne•8/21/24, 2:25 PM

i use a web app configuration with pkce, if i have enabled the setting on the project and in the application i do not need the role scope.

fabienne•8/21/24, 2:26 PM

the setting on the project generally allows clients to request roles

fabienne•8/21/24, 2:26 PM

after that you can choose if you request per scope or if you configure it on the app

Ffabienne can you check if the assert roles on authentication is enabled on the project?

jesperwe•8/21/24, 7:40 PM

Thanks, I was missing the "Assert Roles" part. As a suggestion, maybe add "Requires the project to have Assert Roles enabled" here:

fabienne•8/22/24, 9:04 AM

great to hear

fabienne•8/22/24, 9:04 AM

and yes we shoul make that more clear