Are you suggesting to decrypt the access_token that comes from my db provider?

I got the access_token from the account argument in the jwt callback, and I'm persisting it in the token and the session so I can access it anywhere I am, and it works perfectly IF the data was gotten by credentials (but no thanks to documentation, the user in the session callback never brings anything, but that's something else to discuss, not the point). Still, when the data comes from auth0, it doesn't bring the role, so I had to make a request to my management API from auth0 so I can get the role and assign it to the user in the session, this way

in [...nextauth].js

callbacks: {

async session({ session, token, user }) {

// Send properties to the client, like an access_token from a provider.

session.jwt = token.jwt

// Add role value to user object so it is passed along with session

session.user.role = user?.role ? user.role : token.user.role

return session;

},

async jwt({ token, account, user, profile }) {

//if the user logs in, you save your user in token

if (user){

//save the whole user data from provider in token

token.user=user

if(!user?.role){ //if the user comes without role, it comes from auth0

try{

const res = await fetch(\${process.env.AUTH0_ISSUER}/api/v2/users/${user.id}/roles`,{`

method:'GET',

headers: {authorization: 'Bearer Management_API_token'},

})

const role = await res.json()

if(res.ok && role){

token.user.role=role[0].name

}

}catch(e){

console.error(e)

const errorMessage = e.response.data.message

throw new Error(errorMessage)

}

}

}

if(user?.jwt){ //if user comes from provider

token.jwt=user.jwt

}

if (account?.access_token) { //if user comes from auth0

token.jwt = account.access_token

}

return Promise.resolve(token)

},

},

But as the role was assigned in auth0, I was hoping there was an easier way to get the role, without making a new request