React.js 如何从 jwt 令牌获取用户角色

Question

I'm having a problem with authorization in react.js. I want to store user roles in application context but I don't know how to get them from JWT token. I found 3 possible solutions, which one of them is the best?

• encrypt JWT on client side.
• one more request to get user roles
• return user roles with jwt token ( something like { token: , roles: } ).

Maybe there is some better option that I don't know. Thanks for all advices.

Answer 1

• encrypt JWT on client side: don't do that, let the server do the logic.
• one more request to get user roles: it's okayish, but personally I wouldn't want extra request from client.
• return user roles with jwt token: sure. You can see more info here Is setting Roles in JWT a best practice?

Answer 2

This is the way to do it,

return user roles with jwt token ( something like { token: , roles: } ).

but you don't have to do anything, let the backend do the stuff