# JWT.io **URL:** https://community.auth0.com/c/jwt/8.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Trying to find a JWT through Slush browser ext Chrome (on Macbook)](https://community.auth0.com/t/trying-to-find-a-jwt-through-slush-browser-ext-chrome-on-macbook/205011)
**Author:** [@martinmusatov28](https://community.auth0.com/u/martinmusatov28)\ **Replies:** 0\ **Last updated:** [November 3, 2026, 9:56pm UTC](https://community.auth0.com/t/trying-to-find-a-jwt-through-slush-browser-ext-chrome-on-macbook/205011 "2026-11-03T21:56:15Z")
I keep looking in the ‘inspect’ tooltip and can’t find under local storage or network. Is there any way to get it? I an building a SUI app and have my salt key, but can’t find a JWT to save my life here. Any ideas? Feel … --- ## [how to fetch JWT\_SECRET=a\_long\_random\_secret\_here](https://community.auth0.com/t/how-to-fetch-jwt-secret-a-long-random-secret-here/195344)
**Author:** [@himakshimanmode24](https://community.auth0.com/u/himakshimanmode24)\ **Replies:** 2\ **Last updated:** [October 15, 2026, 9:25pm UTC](https://community.auth0.com/t/how-to-fetch-jwt-secret-a-long-random-secret-here/195344 "2026-10-15T21:25:39Z")
how to fetch JWT\_SECRET=a\_long\_random\_secret\_here --- ## [Unable to automatically download public key from JWT](https://community.auth0.com/t/unable-to-automatically-download-public-key-from-jwt/195234)
**Author:** [@hippogamesunity](https://community.auth0.com/u/hippogamesunity)\ **Replies:** 2\ **Last updated:** [October 15, 2026, 9:05pm UTC](https://community.auth0.com/t/unable-to-automatically-download-public-key-from-jwt/195234 "2026-10-15T21:05:49Z")
Hello! Why cannot jwt.io download a public key? When debugging, it loads https://playid.org/.well-known/openid-configuration, then https://playid.org/.well-known/jwks where the mentioned key is present. But it says “U… --- ## [Fallback to appending .well-known to path when trying to automatically download public key from JWT](https://community.auth0.com/t/fallback-to-appending-well-known-to-path-when-trying-to-automatically-download-public-key-from-jwt/203661)
**Author:** [@klasen](https://community.auth0.com/u/klasen)\ **Replies:** 2\ **Last updated:** [October 12, 2026, 7:24am UTC](https://community.auth0.com/t/fallback-to-appending-well-known-to-path-when-trying-to-automatically-download-public-key-from-jwt/203661 "2026-10-12T07:24:40Z")
Hi, when attempting to automatically download public key from JWT, jwt.io should fallback to appending .well-known path components if a request to a URL constructed by inserting fails. From RFC 8414: \[...\] However,… --- ## [Will jwt.io support the newly standardized ML-DSA algorithms?](https://community.auth0.com/t/will-jwt-io-support-the-newly-standardized-ml-dsa-algorithms/201685)
**Author:** [@Ariadna0](https://community.auth0.com/u/Ariadna0)\ **Replies:** 1\ **Last updated:** [August 31, 2026, 6:52pm UTC](https://community.auth0.com/t/will-jwt-io-support-the-newly-standardized-ml-dsa-algorithms/201685 "2026-08-31T18:52:26Z")
The algorithms ML-DSA-44, ML-DSA-65, and ML-DSA-87 have recently been standardized in RFC 9964 and registered with IANA. I wonder if the JWT dot io team plans to provide support for those algorithms? Since they are now … --- ## [\[Issue\] Non-specific error message when pasting JWK](https://community.auth0.com/t/issue-non-specific-error-message-when-pasting-jwk/200703)
**Author:** [@hunter.kirkland](https://community.auth0.com/u/hunter.kirkland)\ **Replies:** 2\ **Last updated:** [July 8, 2026, 7:41pm UTC](https://community.auth0.com/t/issue-non-specific-error-message-when-pasting-jwk/200703 "2026-07-08T19:41:46Z")
“Data provided to the operation does not meet requirements.” Using the below key, I get the above error message. Severely unhelpful: too vague. JWT text: {"kty":"RSA","e":"AQAB","use":"sig","kid":"FHIRKey","alg":"RS38… --- ## [Receiving JWE token instead of JWT in Next.js app session](https://community.auth0.com/t/receiving-jwe-token-instead-of-jwt-in-next-js-app-session/167855)
**Author:** [@rsacks](https://community.auth0.com/u/rsacks)\ **Replies:** 6\ **Last updated:** [July 7, 2026, 11:06am UTC](https://community.auth0.com/t/receiving-jwe-token-instead-of-jwt-in-next-js-app-session/167855 "2026-07-07T11:06:13Z")
Hi, We are expecting, a JWT token. We can’t figure out why we are getting a JWE token instead. The only option I can find that would cause this is a plugin that is off. My understanding is JWT should be the default. I a… --- ## [Permissions from event.authorization.permissions become empty in custom JWT generated inside Post Login Action](https://community.auth0.com/t/permissions-from-event-authorization-permissions-become-empty-in-custom-jwt-generated-inside-post-login-action/200229)
**Author:** [@usha78633](https://community.auth0.com/u/usha78633)\ **Replies:** 1\ **Last updated:** [May 29, 2026, 8:42pm UTC](https://community.auth0.com/t/permissions-from-event-authorization-permissions-become-empty-in-custom-jwt-generated-inside-post-login-action/200229 "2026-05-29T20:42:24Z")
I am using a Post Login Action in Auth0 to generate a custom PAT JWT using jsonwebtoken.sign(). RBAC is enabled and “Add Permissions in Access Token” is enabled for my API. The Auth0-issued access token correctly conta… --- ## [No answer after the paste of token](https://community.auth0.com/t/no-answer-after-the-paste-of-token/199924)
**Author:** [@RaissaMatosDev](https://community.auth0.com/u/RaissaMatosDev)\ **Replies:** 1\ **Last updated:** [May 29, 2026, 8:41pm UTC](https://community.auth0.com/t/no-answer-after-the-paste-of-token/199924 "2026-05-29T20:41:18Z")
the program is on error and dont working correctly when i paste my token. It just give me a exception! --- ## [\[Feedback\] Mention that JWT decoding happens fully locally](https://community.auth0.com/t/feedback-mention-that-jwt-decoding-happens-fully-locally/198059)
**Author:** [@nimobeeren](https://community.auth0.com/u/nimobeeren)\ **Replies:** 3\ **Last updated:** [May 27, 2026, 11:03am UTC](https://community.auth0.com/t/feedback-mention-that-jwt-decoding-happens-fully-locally/198059 "2026-05-27T11:03:48Z")
I noticed today that the design of the JWT decoder/encoder on jwt.io has changed. There used to be a message saying that JWT decoding happens fully locally; the token is never sent across the wire. In the new version, … --- ## [Token and refresh token sought](https://community.auth0.com/t/token-and-refresh-token-sought/199297)
**Author:** [@jefijefin8](https://community.auth0.com/u/jefijefin8)\ **Replies:** 1\ **Last updated:** [April 30, 2026, 6:22pm UTC](https://community.auth0.com/t/token-and-refresh-token-sought/199297 "2026-04-30T18:22:13Z")
my understanding about token is jwt is only return accesstoken that doesnot contain username ,email such without password ,but refresh token is genarated by jwt or backend my understanding is it is a random string ge… --- ## [Encrypted JWTs support on website](https://community.auth0.com/t/encrypted-jwts-support-on-website/196104)
**Author:** [@beatt83](https://community.auth0.com/u/beatt83)\ **Replies:** 1\ **Last updated:** [March 27, 2026, 6:59pm UTC](https://community.auth0.com/t/encrypted-jwts-support-on-website/196104 "2026-03-27T18:59:22Z")
Hi there team. I wanted to ask you guys if it would be possible to add on the website support for libraries to show they support encrypted JWTs since it is part of the JWT RFC, although its not visible on the website wh… --- ## [Replacement of \`lua-resty-jwt\` for https://www.jwt.io/libraries](https://community.auth0.com/t/replacement-of-lua-resty-jwt-for-https-www-jwt-io-libraries/197761)
**Author:** [@cdbattags](https://community.auth0.com/u/cdbattags)\ **Replies:** 2\ **Last updated:** [March 2, 2026, 3:04pm UTC](https://community.auth0.com/t/replacement-of-lua-resty-jwt-for-https-www-jwt-io-libraries/197761 "2026-03-02T15:04:32Z")
Hey folks, I’m the maintainer of lua-resty-jwt, an OpenResty/Lua JWT library. The current listing on jwt.io/libraries points to SkyLothar/lua-resty-jwt, which has been abandoned since May 2020 (70+ open issues, no activ… --- ## [AAP: An OAuth 2.0 Authorization Profile for Autonomous AI Agents — Extending JWT with Capabilities, Delegation, and Oversight](https://community.auth0.com/t/aap-an-oauth-2-0-authorization-profile-for-autonomous-ai-agents-extending-jwt-with-capabilities-delegation-and-oversight/197062)
**Author:** [@abr4xas](https://community.auth0.com/u/abr4xas)\ **Replies:** 0\ **Last updated:** [February 7, 2026, 9:59pm UTC](https://community.auth0.com/t/aap-an-oauth-2-0-authorization-profile-for-autonomous-ai-agents-extending-jwt-with-capabilities-delegation-and-oversight/197062 "2026-02-07T21:59:04Z")
Hi Auth0 community, I’d like to share a project that addresses a gap we encountered when deploying AI agents in production: how to properly authorize autonomous agents using OAuth 2.0. The Problem OAuth 2.0 scopes wor… --- ## [Hidden media files, photos, codes and stego](https://community.auth0.com/t/hidden-media-files-photos-codes-and-stego/196292)
**Author:** [@iambryan7787](https://community.auth0.com/u/iambryan7787)\ **Replies:** 1\ **Last updated:** [January 15, 2026, 5:30pm UTC](https://community.auth0.com/t/hidden-media-files-photos-codes-and-stego/196292 "2026-01-15T17:30:15Z")
I have a bunch of files, codes, photos with hidden messages and all kinds of things I am unable to access because I can’t figure it out. Please help! --- ## [Generating JWTs using the jjwt library with algorthims PS256, PS384, PS512, and EdDSA on Java 21 fails https://jwt.io site signature verification](https://community.auth0.com/t/generating-jwts-using-the-jjwt-library-with-algorthims-ps256-ps384-ps512-and-eddsa-on-java-21-fails-https-jwt-io-site-signature-verification/195668)
**Author:** [@ppaternostro](https://community.auth0.com/u/ppaternostro)\ **Replies:** 1\ **Last updated:** [December 31, 2025, 1:49pm UTC](https://community.auth0.com/t/generating-jwts-using-the-jjwt-library-with-algorthims-ps256-ps384-ps512-and-eddsa-on-java-21-fails-https-jwt-io-site-signature-verification/195668 "2025-12-31T13:49:59Z")
When generating JWTs with the jjwt library on Java 21 and specifying the PS256, PS384, PS512, and EdDSA algorithms, the JWT is generated successfully. However, when validating the generated JWT on the jwt.io site, signat… --- ## [Why was the option to modify JWT's removed on jwt.io](https://community.auth0.com/t/why-was-the-option-to-modify-jwts-removed-on-jwt-io/194252)
**Author:** [@andreas-lundgren-tel](https://community.auth0.com/u/andreas-lundgren-tel)\ **Replies:** 1\ **Last updated:** [November 28, 2025, 7:01pm UTC](https://community.auth0.com/t/why-was-the-option-to-modify-jwts-removed-on-jwt-io/194252 "2025-11-28T19:01:18Z")
Hi! Wya was the option to modify and re-sign JWT’s removed from jwt \[dot\] io ? Is there a plan to add it back? It was quite a useful function for testing, saved you some manual work during development. Anyone know wher… --- ## [\[Feedback\] JWT.io / Encoding Format / Base64](https://community.auth0.com/t/feedback-jwt-io-encoding-format-base64/193575)
**Author:** [@blop](https://community.auth0.com/u/blop)\ **Replies:** 1\ **Last updated:** [October 31, 2025, 8:17pm UTC](https://community.auth0.com/t/feedback-jwt-io-encoding-format-base64/193575 "2025-10-31T20:17:21Z")
Hello ! Could you consider adding another option in the “Encoding Format” of the secret key? Currently there is “UTF-8“ and “base64url“, could be nice and easy to add the “base64” encoding as well (which is slightly di… --- ## [Will JWT support PQC (Post quantum cryptography) replace RSA and ECDSA as a new standard](https://community.auth0.com/t/will-jwt-support-pqc-post-quantum-cryptography-replace-rsa-and-ecdsa-as-a-new-standard/192970)
**Author:** [@teerakiat88](https://community.auth0.com/u/teerakiat88)\ **Replies:** 1\ **Last updated:** [October 31, 2025, 7:54pm UTC](https://community.auth0.com/t/will-jwt-support-pqc-post-quantum-cryptography-replace-rsa-and-ecdsa-as-a-new-standard/192970 "2025-10-31T19:54:34Z")
NIST already annouce the replacement of RSA and ECDSA in the future of PQC , will JWT support new ML-DSA algorithm in the standard spec. just want to know as this will impact to the whole industry to prevent cyber securi… --- ## [JWT Debugger - missing editing payload](https://community.auth0.com/t/jwt-debugger-missing-editing-payload/188182)
**Author:** [@ondrej.schrek](https://community.auth0.com/u/ondrej.schrek)\ **Replies:** 4\ **Last updated:** [September 26, 2025, 3:41pm UTC](https://community.auth0.com/t/jwt-debugger-missing-editing-payload/188182 "2025-09-26T15:41:59Z")
After the update, there is no option for editing the token payload. --- ## [Jwt.sign Right-hand side of 'instanceof' is not an object](https://community.auth0.com/t/jwt-sign-right-hand-side-of-instanceof-is-not-an-object/191843)
**Author:** [@fixo.now](https://community.auth0.com/u/fixo.now)\ **Replies:** 1\ **Last updated:** [September 30, 2025, 1:20pm UTC](https://community.auth0.com/t/jwt-sign-right-hand-side-of-instanceof-is-not-an-object/191843 "2025-09-30T13:20:38Z")
when i use jwt.sign i get this error “Right-hand side of ‘instanceof’ is not an object” how to fix this --- ## [Incorrect display of big numbers](https://community.auth0.com/t/incorrect-display-of-big-numbers/191757)
**Author:** [@zyu-godaddy](https://community.auth0.com/u/zyu-godaddy)\ **Replies:** 2\ **Last updated:** [September 11, 2025, 5:45am UTC](https://community.auth0.com/t/incorrect-display-of-big-numbers/191757 "2025-09-11T05:45:54Z")
If a claim value is a json number that’s bigger than 64 bit unsigned integer, the decoder on jwt . io will show an incorrect value, which is apparently due to conversion of number→double→string. --- ## [\[Issue\] Unable to select JWK under JWT SIGNATURE VALIDATION](https://community.auth0.com/t/issue-unable-to-select-jwk-under-jwt-signature-validation/189978)
**Author:** [@Dahventura](https://community.auth0.com/u/Dahventura)\ **Replies:** 1\ **Last updated:** [July 31, 2025, 7:43pm UTC](https://community.auth0.com/t/issue-unable-to-select-jwk-under-jwt-signature-validation/189978 "2025-07-31T19:43:06Z")
When attempting to validate a JWT, I receive the following error when selecting the JWK public key format from the dropdown menu. Uncaught TypeError: can't access property "some", e.options is undefined --- ## [New jwt.io fails to verify signature for HS512](https://community.auth0.com/t/new-jwt-io-fails-to-verify-signature-for-hs512/189278)
**Author:** [@mypascal2000](https://community.auth0.com/u/mypascal2000)\ **Replies:** 1\ **Last updated:** [July 31, 2025, 3:35pm UTC](https://community.auth0.com/t/new-jwt-io-fails-to-verify-signature-for-hs512/189278 "2025-07-31T15:35:11Z")
I generate my jwt token using a token secret such as “tokensecretstring” and HS512. I used to be able to go to “jwt .io” and copy my jwt into left side (all 3 parts) and it would get decoded. And at the bottom in signa… --- ## [\[Issue\] Uncaught TypeError: Cannot read properties of undefined (reading 'some')](https://community.auth0.com/t/issue-uncaught-typeerror-cannot-read-properties-of-undefined-reading-some/189934)
**Author:** [@javier-mino\_globant](https://community.auth0.com/u/javier-mino_globant)\ **Replies:** 1\ **Last updated:** [July 30, 2025, 6:20pm UTC](https://community.auth0.com/t/issue-uncaught-typeerror-cannot-read-properties-of-undefined-reading-some/189934 "2025-07-30T18:20:50Z")
Generate Example not working Steps: Click on “Generate example” Click on “Select a signing algorithm” Select any algorithm Expected: An example is created with the selected algorithm Actual: “Select a signing al… --- ## [Wrong content being served on www.jwt.io](https://community.auth0.com/t/wrong-content-being-served-on-www-jwt-io/189317)
**Author:** [@daanbiesterbos](https://community.auth0.com/u/daanbiesterbos)\ **Replies:** 1\ **Last updated:** [July 22, 2025, 10:21pm UTC](https://community.auth0.com/t/wrong-content-being-served-on-www-jwt-io/189317 "2025-07-22T22:21:31Z")
Hi there, Google just redirected me to the www version of jwt io. (I cannot post URL’s). But imagine my confusion. Especially since the browser hides the www part. Just wanted to let you know it’s probably best to … --- ## [\[Issue\] debugger is not working](https://community.auth0.com/t/issue-debugger-is-not-working/188652)
**Author:** [@venefax](https://community.auth0.com/u/venefax)\ **Replies:** 1\ **Last updated:** [July 31, 2025, 7:48pm UTC](https://community.auth0.com/t/issue-debugger-is-not-working/188652 "2025-07-31T19:48:26Z")
I past this valid Stir Shaken Token and it says it’s incomplete, but it’s not. eyJhbGciOiJFUzI1NiIsInBwdCI6InNoYWtlbiIsInR5cCI6InBhc3Nwb3J0IiwieDV1IjoiaHR0cHM6Ly94Zm9uZS51cy9qYXBjem9yLzUifQ.eyJhdHRlc3QiOiJCIiwiZG VzdCI… --- ## [\[Feedback\] The separation of the Decoder and Encoder should be reverted](https://community.auth0.com/t/feedback-the-separation-of-the-decoder-and-encoder-should-be-reverted/187040)
**Author:** [@f.flora](https://community.auth0.com/u/f.flora)\ **Replies:** 1\ **Last updated:** [May 29, 2025, 1:17pm UTC](https://community.auth0.com/t/feedback-the-separation-of-the-decoder-and-encoder-should-be-reverted/187040 "2025-05-29T13:17:37Z")
Hello, As title says, I think the idea of separating the encoder and decoder made using the application a lot more of a hassle. Instead of making changes left and right, now an additional step is required (and as a side… --- ## [Keycloak initialization failed](https://community.auth0.com/t/keycloak-initialization-failed/185376)
**Author:** [@homayungit](https://community.auth0.com/u/homayungit)\ **Replies:** 1\ **Last updated:** [April 30, 2025, 8:51pm UTC](https://community.auth0.com/t/keycloak-initialization-failed/185376 "2025-04-30T20:51:32Z")
I’m using Keycloak for SSO, YARP as the API Gateway, .NET 9 Web API, and React for the frontend. I already have a deployed environment where everything works fine when hosted on Windows Server with IIS. However, I recen… --- ## [Add JWT encryption](https://community.auth0.com/t/add-jwt-encryption/184846)
**Author:** [@beatt83](https://community.auth0.com/u/beatt83)\ **Replies:** 1\ **Last updated:** [April 4, 2025, 4:12pm UTC](https://community.auth0.com/t/add-jwt-encryption/184846 "2025-04-04T16:12:29Z")
Hey guys. I wanted to ask you, can you by any chance in the new version of jwt.io on the section libraries supported functionalities, add not only JWT (Signed) but as well JWT (Encrypted) since it part of the RFC I think… [Next page](https://community.auth0.com/c/jwt/8.md?page=1)