Replies: 1 comment
-
|
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello everyone! I'm confused to choose the right way for getting token to protect my app/api. I have Nextjs multitennant application and API by Nestjs. In client side i have to obtain access token for every api call and verify it on server side. In case of using getOrganizationToken i have to verify audience (urn:logto:organization:orgId), but need to send custom http headers with tenant id. And if i use getAccessToken(orgId) i have organization_id in jwt with audience 'api resource'.
Beta Was this translation helpful? Give feedback.
All reactions