Troubleshooting: Verifying Claims in the Auth Token

Inspect the claims in an issued auth token when access is not behaving as expected.

If a user logs into the Lobyco Portal but does not see the expected data, it may indicate that the required claim/claims missing or incorrectly assigned. To troubleshoot:

1. Capture the authorization token

   • Open your browser’s developer tools (typically by pressing F12 or Ctrl+Shift+I).
   • Go to the Network tab.
   • Refresh the page and look for a request to an API endpoint that includes an Authorization: Bearer header.
   • Copy the token value (the long string following Bearer ).
2. Decode the token using a trusted tool

   • Go to https://jwt.ms or another trusted JWT decoder.
   • Paste the token into the input field.
   • The tool will decode the token and display the payload, which includes all the claims.
3. Verify claims

   Confirm that the claim exists and includes the expected values (e.g. a valid role, store or chain ID).

   If the claim is missing then revisit the configuration steps to ensure the claim was correctly assigned to the user.