How do I idiomatically check and process custom JWT claims?

Question

I\'m using Auth0 for authentication and have users with various roles & permissions. The JWT tokens returned don\'t have the permissions listed in the scope