# JWT.io **URL:** https://community.auth0.com/c/jwt/8.md?page=5 [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) **Page:** 6 --- ## [JWT Token Library / maven: com.nimbusds / nimbus-jose-jwt](https://community.auth0.com/t/jwt-token-library-maven-com-nimbusds-nimbus-jose-jwt/73913)
**Author:** [@wolfomat](https://community.auth0.com/u/wolfomat)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 6:14pm UTC](https://community.auth0.com/t/jwt-token-library-maven-com-nimbusds-nimbus-jose-jwt/73913 "2021-11-29T18:14:43Z")
Hi there, on your page you are suggesting the version 5.7 of the library above. current version is 9.15.2 → can you recommend this version , too? --- ## [Where i can find a simple example of php-jwt auth?](https://community.auth0.com/t/where-i-can-find-a-simple-example-of-php-jwt-auth/72450)
**Author:** [@allsportvideomavpa](https://community.auth0.com/u/allsportvideomavpa)\ **Replies:** 1\ **Last updated:** [November 5, 2021, 12:08am UTC](https://community.auth0.com/t/where-i-can-find-a-simple-example-of-php-jwt-auth/72450 "2021-11-05T00:08:24Z")
Hi there! I have just installed PHP-JWT library from GitHub - firebase/php-jwt: PHP package for JWT. There i found only encrypting/decrypting examples, without sending data from forms and authorising with generating tok… --- ## [Auth0 access token is missing the JWS payload](https://community.auth0.com/t/auth0-access-token-is-missing-the-jws-payload/71674)
**Author:** [@sarunas.marozas1](https://community.auth0.com/u/sarunas.marozas1)\ **Replies:** 4\ **Last updated:** [October 26, 2021, 2:30pm UTC](https://community.auth0.com/t/auth0-access-token-is-missing-the-jws-payload/71674 "2021-10-26T14:30:13Z")
Hi, The access token issued by Auth0 is missing the middle part. It is a JWT token and JWT tokens are made of three parts and the part called JWS payload is missing. The token looks something like this: QAIOPJhbGciOiJ… --- ## [How can I make a token expire in 30 seconds please?](https://community.auth0.com/t/how-can-i-make-a-token-expire-in-30-seconds-please/68642)
**Author:** [@DonnaMara](https://community.auth0.com/u/DonnaMara)\ **Replies:** 2\ **Last updated:** [August 27, 2021, 10:59am UTC](https://community.auth0.com/t/how-can-i-make-a-token-expire-in-30-seconds-please/68642 "2021-08-27T10:59:32Z")
I notice I can add “exp”: 30 in the header, but that would mean 30 seconds since Unix time so not very useful; i need 30 sec since present time. any help please? --- ## [Get new Access Token for a different organization](https://community.auth0.com/t/get-new-access-token-for-a-different-organization/68426)
**Author:** [@danillo.mendonca](https://community.auth0.com/u/danillo.mendonca)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 12:35pm UTC](https://community.auth0.com/t/get-new-access-token-for-a-different-organization/68426 "2021-08-25T12:35:45Z")
Lets say i have user within 2 differents organization. He then log in using one of his organizations and i have a way in my front end that he can switch to another organization with one click. Is there way that i can g… --- ## [Organization Permissions on access token](https://community.auth0.com/t/organization-permissions-on-access-token/68362)
**Author:** [@danillo.mendonca](https://community.auth0.com/u/danillo.mendonca)\ **Replies:** 3\ **Last updated:** [August 24, 2021, 9:55pm UTC](https://community.auth0.com/t/organization-permissions-on-access-token/68362 "2021-08-24T21:55:08Z")
Hello, I want to get the permissions for the organization that was logged in inside the access token but its not working. Here’s some screenshots; I have 2 organizations and they both have the same member: But with d… --- ## [May I ask how many user roles/groups can be added to a JWT?](https://community.auth0.com/t/may-i-ask-how-many-user-roles-groups-can-be-added-to-a-jwt/68179)
**Author:** [@fengtingting2001](https://community.auth0.com/u/fengtingting2001)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 4:45pm UTC](https://community.auth0.com/t/may-i-ask-how-many-user-roles-groups-can-be-added-to-a-jwt/68179 "2021-08-20T16:45:46Z")
Dear all, May I ask how many user roles/groups can be added to a JWT? Any lights or documentations? Thanks. TT --- ## [Question on tokens from external connections](https://community.auth0.com/t/question-on-tokens-from-external-connections/67717)
**Author:** [@devops8](https://community.auth0.com/u/devops8)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 9:10pm UTC](https://community.auth0.com/t/question-on-tokens-from-external-connections/67717 "2021-08-11T21:10:28Z")
We are currently intergating with a client through an enterprise connection and we are receiving an auth0 token successfully but since this is an auth0 token, we are unable to use that to call back into their API which w… --- ## [RS256 is defaulting to HS256 in production](https://community.auth0.com/t/rs256-is-defaulting-to-hs256-in-production/67159)
**Author:** [@StoicalPirate](https://community.auth0.com/u/StoicalPirate)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 5:41pm UTC](https://community.auth0.com/t/rs256-is-defaulting-to-hs256-in-production/67159 "2021-08-02T17:41:38Z")
I’ve built and tested an Azure Static Web App using a Vue frontend and Python APIs. Everything is working well with Auth0 locally, however, now I’m deploying into production I’ve received a really strange issue. It seems… --- ## [Where to store JWT token?](https://community.auth0.com/t/where-to-store-jwt-token/66771)
**Author:** [@amarudemonn](https://community.auth0.com/u/amarudemonn)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 5:32pm UTC](https://community.auth0.com/t/where-to-store-jwt-token/66771 "2021-07-26T17:32:14Z")
Lets say I have an api that generates jwt tokens for me via /auth url so I get the token back and I have the SPA in any front end framework like vue, react, etc. so how and where do I actually store the token? --- ## [The difference between making a jwt token and a specific token](https://community.auth0.com/t/the-difference-between-making-a-jwt-token-and-a-specific-token/65996)
**Author:** [@mohammadhadi](https://community.auth0.com/u/mohammadhadi)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 7:34am UTC](https://community.auth0.com/t/the-difference-between-making-a-jwt-token-and-a-specific-token/65996 "2021-07-14T07:34:15Z")
What difference does it make if I write a dedicated token, for example, like the api of different and famous sites like Google, for example, Google says send a request to this address https://maps.googleapis.com/maps/api… --- ## [JWT implementation in Java using .pem](https://community.auth0.com/t/jwt-implementation-in-java-using-pem/65338)
**Author:** [@dev2021](https://community.auth0.com/u/dev2021)\ **Replies:** 1\ **Last updated:** [July 7, 2021, 12:04pm UTC](https://community.auth0.com/t/jwt-implementation-in-java-using-pem/65338 "2021-07-07T12:04:23Z")
Would like to know if JWT implementation (generating token) in Java is only possible only via .jks file in keystore of we can do it using a .pem (certificate and key) file as well ? I would like to store the .jks file i… --- ## [HTTP 404 when passing long JWT in query string](https://community.auth0.com/t/http-404-when-passing-long-jwt-in-query-string/64126)
**Author:** [@steve-king-ky](https://community.auth0.com/u/steve-king-ky)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 5:36pm UTC](https://community.auth0.com/t/http-404-when-passing-long-jwt-in-query-string/64126 "2021-06-09T17:36:11Z")
Our web application has a JWT that we want to send to other applications (the application itself is a portal). Initially we wanted to send it using the Authentication header (Bearer) but there’s no way to do this via, sa… --- ## [Should I store JWT tokens in IndexedDB?](https://community.auth0.com/t/should-i-store-jwt-tokens-in-indexeddb/63100)
**Author:** [@karandave09](https://community.auth0.com/u/karandave09)\ **Replies:** 3\ **Last updated:** [May 27, 2021, 7:06pm UTC](https://community.auth0.com/t/should-i-store-jwt-tokens-in-indexeddb/63100 "2021-05-27T19:06:49Z")
After reading some articles, I realize that using localStorage and sessionStorage is a bad idea for storing JWT tokens, and cookies with httpOnly should be used instead. As I read more and learn some about indexedDB tod… --- ## [Server error while trying to login on the Auth0 playground](https://community.auth0.com/t/server-error-while-trying-to-login-on-the-auth0-playground/63051)
**Author:** [@contactgorank](https://community.auth0.com/u/contactgorank)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 5:43pm UTC](https://community.auth0.com/t/server-error-while-trying-to-login-on-the-auth0-playground/63051 "2021-05-20T17:43:44Z")
Hi, We are trying to create a bearer token to check how m2m authentication works on auth0. We are getting a ‘server error’ when we try to login on the tight panel of the sandbox. I have attached the screenshot here. … --- ## [Signature Invalid when signing with JWT.NET](https://community.auth0.com/t/signature-invalid-when-signing-with-jwt-net/62792)
**Author:** [@hypnotic](https://community.auth0.com/u/hypnotic)\ **Replies:** 4\ **Last updated:** [May 17, 2021, 11:15pm UTC](https://community.auth0.com/t/signature-invalid-when-signing-with-jwt-net/62792 "2021-05-17T23:15:10Z")
Hey, I am currently struggling with creating signatures with any .net library to access Twitch api endpoints. The jwt.io page always says the signature is invalid when I copy paste my generated jwt there. When I edit th… --- ## [How many characters does a JWT token consists of is there min and max limit?](https://community.auth0.com/t/how-many-characters-does-a-jwt-token-consists-of-is-there-min-and-max-limit/61326)
**Author:** [@santhosh1](https://community.auth0.com/u/santhosh1)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 8:12am UTC](https://community.auth0.com/t/how-many-characters-does-a-jwt-token-consists-of-is-there-min-and-max-limit/61326 "2021-04-19T08:12:46Z")
I would want to know what is the minimum and maximum characters that can be presnt in a JWT token --- ## [How can I automate the recovery of a user id token for automated tests?](https://community.auth0.com/t/how-can-i-automate-the-recovery-of-a-user-id-token-for-automated-tests/61161)
**Author:** [@theod](https://community.auth0.com/u/theod)\ **Replies:** 5\ **Last updated:** [April 16, 2021, 6:44pm UTC](https://community.auth0.com/t/how-can-i-automate-the-recovery-of-a-user-id-token-for-automated-tests/61161 "2021-04-16T18:44:08Z")
Hello, I am working on a project on which I authenticate my users on a front-end (authorization code with PKCE) . Then, I am sending to my back-end the id token in order to check the authentication and return some infor… --- ## [How to get PUBLIC KEY PEM from jwks.json](https://community.auth0.com/t/how-to-get-public-key-pem-from-jwks-json/60355)
**Author:** [@dch](https://community.auth0.com/u/dch)\ **Replies:** 10\ **Last updated:** [March 31, 2021, 4:41pm UTC](https://community.auth0.com/t/how-to-get-public-key-pem-from-jwks-json/60355 "2021-03-31T16:41:53Z")
Our backend application requires the public cert of the signing key, in PEM format. The jwks.json url at https://domainauth0.com/.well-known/jwks.json spits back: { "keys": \[ { "alg": "RS256", "kty": … --- ## [Scopes are missing?](https://community.auth0.com/t/scopes-are-missing/58143)
**Author:** [@wahmed](https://community.auth0.com/u/wahmed)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 12:58pm UTC](https://community.auth0.com/t/scopes-are-missing/58143 "2021-02-23T12:58:14Z")
We were using the scope \[‘email’, ‘openid’ ,‘profile’\] in auth0 rules. Is there anything that happened that this information is not present in the id token? It was working earlier but all of the sudden email information… --- ## [Native app RS256 key not appearing in JWKS /.well-known/jwks.json](https://community.auth0.com/t/native-app-rs256-key-not-appearing-in-jwks-well-known-jwks-json/57960)
**Author:** [@henning.wagner](https://community.auth0.com/u/henning.wagner)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 1:24pm UTC](https://community.auth0.com/t/native-app-rs256-key-not-appearing-in-jwks-well-known-jwks-json/57960 "2021-02-17T13:24:01Z")
We have multiple environments + web and native clients., resulting in a couple of Auth0 Applications configured. The Applications that are of type Machine to Machine are listed in our /.well-known/jwks.json but the Appli… --- ## [Auth0 and Firebase Integration](https://community.auth0.com/t/auth0-and-firebase-integration/56923)
**Author:** [@ivicat.auth0](https://community.auth0.com/u/ivicat.auth0)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 6:48pm UTC](https://community.auth0.com/t/auth0-and-firebase-integration/56923 "2021-01-28T18:48:22Z")
We are using Auth0 is our authentication provider and Firebase for database operation. For authentication using auth0-js java script library with Angular framework, Please let me know we can pass auth0 token to firebase … --- ## [Token for rest within rule](https://community.auth0.com/t/token-for-rest-within-rule/56865)
**Author:** [@wahmed](https://community.auth0.com/u/wahmed)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 4:44pm UTC](https://community.auth0.com/t/token-for-rest-within-rule/56865 "2021-01-27T16:44:05Z")
I need some information from my resource server or need to hit an endpoint to do some stuff. I want to create JWT token within my rule before the callback. So I could have that endpoint working. Is there any workaround… --- ## [Go Authorization: Scoped API not working](https://community.auth0.com/t/go-authorization-scoped-api-not-working/55530)
**Author:** [@mattwatson](https://community.auth0.com/u/mattwatson)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 8:40pm UTC](https://community.auth0.com/t/go-authorization-scoped-api-not-working/55530 "2021-01-05T20:40:51Z")
I have been working through the Authorization documentation for Go (https://auth0.com/docs/quickstart/backend/golang/01-authorization) as I would like to have a set of private Go APIs and integrate this with Vue SPA. It … --- ## [Auth0|{user\_id } length](https://community.auth0.com/t/auth0-user-id-length/55371)
**Author:** [@diego.alejandro.gome](https://community.auth0.com/u/diego.alejandro.gome)\ **Replies:** 2\ **Last updated:** [December 27, 2020, 4:56pm UTC](https://community.auth0.com/t/auth0-user-id-length/55371 "2020-12-27T16:56:47Z")
I use Auth0 without social identity connection meaning all of my user\_id fields in the id token have a auth0|{user\_id } pattern. I noticed the user\_id part is always a hex number so I want to strip the auth0| part and us… --- ## [Zoom social connection - sign up and log in](https://community.auth0.com/t/zoom-social-connection-sign-up-and-log-in/55054)
**Author:** [@shellmac](https://community.auth0.com/u/shellmac)\ **Replies:** 1\ **Last updated:** [December 21, 2020, 7:50pm UTC](https://community.auth0.com/t/zoom-social-connection-sign-up-and-log-in/55054 "2020-12-21T19:50:18Z")
We are trying to allow users on our app to sign up and log in to our app through Zoom as a social connection (similar to gmail), and return a token and auth sub ID upon successful login. I noticed that Zoom is not suppor… --- ## [Spring security does not accept "at+jwt"](https://community.auth0.com/t/spring-security-does-not-accept-at-jwt/52965)
**Author:** [@skyep29](https://community.auth0.com/u/skyep29)\ **Replies:** 0\ **Last updated:** [November 10, 2020, 6:45am UTC](https://community.auth0.com/t/spring-security-does-not-accept-at-jwt/52965 "2020-11-10T06:45:21Z")
Good day, I’m using spring-security-jwt release 1.1.1. When I try to decode an access token, it fails in the class below, as it expects “JWT”, but gets “at+jwt”. Does anyone know how I can get it to accept the “at+jwt” t… --- ## [Which PHP JWT package is best to work with PHP version 5.6](https://community.auth0.com/t/which-php-jwt-package-is-best-to-work-with-php-version-5-6/53374)
**Author:** [@a2kmkoehler](https://community.auth0.com/u/a2kmkoehler)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 4:16pm UTC](https://community.auth0.com/t/which-php-jwt-package-is-best-to-work-with-php-version-5-6/53374 "2020-11-17T16:16:01Z")
Which PHP JWT package is best to work with PHP version 5.6. --- ## [请教一个关于生成秘钥长度的问题](https://community.auth0.com/t/topic/52164)
**Author:** [@wwzorz](https://community.auth0.com/u/wwzorz)\ **Replies:** 2\ **Last updated:** [November 16, 2020, 11:32pm UTC](https://community.auth0.com/t/topic/52164 "2020-11-16T23:32:05Z")
.net core idenityserver 生成的 token秘钥有点长 怎么样才可以让其短一点,没有找到相关的文档和设置的地方,请各位大佬指点,谢谢了 --- ## [Set custom iss / sub claim](https://community.auth0.com/t/set-custom-iss-sub-claim/52815)
**Author:** [@joshua2](https://community.auth0.com/u/joshua2)\ **Replies:** 1\ **Last updated:** [November 9, 2020, 9:09pm UTC](https://community.auth0.com/t/set-custom-iss-sub-claim/52815 "2020-11-09T21:09:59Z")
Hi, I’d like to set a custom issuer and subject claim in the generated JWTs. I can’t find a way to reconfigure those and overriding them in hooks also doesn’t seem to work. Is there any way to changet those two proper… [Previous page](https://community.auth0.com/c/jwt/8.md?page=4) [Next page](https://community.auth0.com/c/jwt/8.md?page=6)