Security
SaaS Dev
Troubleshooting Auth0 and Firebase with JWT Debugger
Identifying permission scopes and role-based access control (RBAC) errors in your SaaS tokens.
Debugging SaaS Identity Tokens
Auth0 and Firebase use JWTs to transmit identity claims. If a user can't access a specific resource, the answer is usually hidden in the payload scopes.
How-To: Audit Permissions
- Grab the
id_tokenoraccess_tokenfrom your network tab. - Paste it into the JWT Debugger.
- Look for the
permissionsorscopekeys. - Verify the
sub(Subject) matches your database user ID.