How to properly use custom authorization token from external identity providers?

What is the recommended pattern to use in case of using an existing external identity provider (Firebase, Auth0, or any other OAuthX/OIDC flow)? Especially when it requires to regularly refresh the token / check if the user has not been deleted or blocked.

Also, I don't find a way to get the Authorization header to validate the token.

I found some references about the X-Xano-Authorization* headers in the docs but without any example of how to implement them (https://docs.xano.com/building-features/authentication-sign-up-and-log-in/authentication#alternative-authentication-headers).

Anyone can clarify this?

Thank you!

1
1 reply