# JWT.io

**URL:** https://community.auth0.com/c/jwt/8.md?page=6

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

**Page:** 7

---

## [RSA Public/Private pair generate](https://community.auth0.com/t/rsa-public-private-pair-generate/52366)

<div class="topic-metadata">

**Author:** [@jugalnaik123](https://community.auth0.com/u/jugalnaik123)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 1:28am UTC](https://community.auth0.com/t/rsa-public-private-pair-generate/52366 "2020-10-29T01:28:02Z")

</div>

Hi All, I am new to JWT,I am working on RSA256 JWT auth. I want to generate a private/Public key pair,I tried to generate online but the public key not getting validate. Is there any other way we need to generate the …

---

## [What is the use of the checkbox at jwt.io Debugger?](https://community.auth0.com/t/what-is-the-use-of-the-checkbox-at-jwt-io-debugger/51978)

<div class="topic-metadata">

**Author:** [@karl.heng](https://community.auth0.com/u/karl.heng)\
**Replies:** 7\
**Last updated:** [October 28, 2020, 4:04pm UTC](https://community.auth0.com/t/what-is-the-use-of-the-checkbox-at-jwt-io-debugger/51978 "2020-10-28T16:04:28Z")

</div>

Hi all, This is a really basic question but I cannot find any explanation after searching around. There is a checkbox beside “secret base64 encoded” when I select HS256 algorithm. Can you explain its use? Thanks.

---

## [Apache + mod\_auth\_openidc+Auth0](https://community.auth0.com/t/apache-mod-auth-openidc-auth0/51364)

<div class="topic-metadata">

**Author:** [@serhii.kucherenko](https://community.auth0.com/u/serhii.kucherenko)\
**Replies:** 0\
**Last updated:** [October 11, 2020, 3:11pm UTC](https://community.auth0.com/t/apache-mod-auth-openidc-auth0/51364 "2020-10-11T15:11:34Z")

</div>

Hi! Could we use Apache mod auth\_openidc for next solution or probably need another option or workaround : When we go to this link: https://qae.domen.com/route/ (we can successful login via Auth0 and here Apache wit…

---

## [@auth0/angular-jwt How to setup TokenGetter while using in memory silent token?](https://community.auth0.com/t/auth0-angular-jwt-how-to-setup-tokengetter-while-using-in-memory-silent-token/51077)

<div class="topic-metadata">

**Author:** [@jovan.somborski](https://community.auth0.com/u/jovan.somborski)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 9:30am UTC](https://community.auth0.com/t/auth0-angular-jwt-how-to-setup-tokengetter-while-using-in-memory-silent-token/51077 "2020-10-06T09:30:27Z")

</div>

tokenGetter is not a function or its undefined. In Angular 9 i had no problems, but in 10, it not work. I load Auth0Client initialization from API with params. HandleAuthentification Continue working with in memory …

---

## [Regular rotation of Signing keys](https://community.auth0.com/t/regular-rotation-of-signing-keys/50156)

<div class="topic-metadata">

**Author:** [@msriitd](https://community.auth0.com/u/msriitd)\
**Replies:** 4\
**Last updated:** [October 2, 2020, 12:52am UTC](https://community.auth0.com/t/regular-rotation-of-signing-keys/50156 "2020-10-02T00:52:56Z")

</div>

Are the signing keys provided by Auth0 hosted on https://your-domain.us.auth0.com static or gets rotated regularly? Is there a mechanism to make signing keys rotate automatically after a regular interval of time? I know …

---

## [Get social 'provider'](https://community.auth0.com/t/get-social-provider/50719)

<div class="topic-metadata">

**Author:** [@mark.hall](https://community.auth0.com/u/mark.hall)\
**Replies:** 6\
**Last updated:** [October 1, 2020, 3:14pm UTC](https://community.auth0.com/t/get-social-provider/50719 "2020-10-01T15:14:04Z")

</div>

Where a user may sign in with one of multiple social identity providers, is it possible to add the provider (.e.g ‘google’) into the access token, perhaps using a rule to do so?

---

## [JWT implementation without third party library](https://community.auth0.com/t/jwt-implementation-without-third-party-library/49283)

<div class="topic-metadata">

**Author:** [@yashvanth](https://community.auth0.com/u/yashvanth)\
**Replies:** 1\
**Last updated:** [September 8, 2020, 8:03pm UTC](https://community.auth0.com/t/jwt-implementation-without-third-party-library/49283 "2020-09-08T20:03:56Z")

</div>

Hi i want to implement the JWT in C language, in Texas instrument controller, but i can’t add third party libraries. I have checked the available C sample codes, but all of the jwt implementation uses third-party libra…

---

## [Invalid signature when adding "crit" to header](https://community.auth0.com/t/invalid-signature-when-adding-crit-to-header/47758)

<div class="topic-metadata">

**Author:** [@jayrlsw](https://community.auth0.com/u/jayrlsw)\
**Replies:** 3\
**Last updated:** [August 17, 2020, 8:00am UTC](https://community.auth0.com/t/invalid-signature-when-adding-crit-to-header/47758 "2020-08-17T08:00:35Z")

</div>

Hello, I am using https://jwt.io/ to test JWT/JWS creation. However, adding a “crit” section to my header and populating the string array seems to make the signature invalid. This is a valid header: { “alg”: “PS256”, …

---

## [Unable to get decoded payload of JWT from auth0/express-jwt library](https://community.auth0.com/t/unable-to-get-decoded-payload-of-jwt-from-auth0-express-jwt-library/47961)

<div class="topic-metadata">

**Author:** [@denzel](https://community.auth0.com/u/denzel)\
**Replies:** 5\
**Last updated:** [August 14, 2020, 7:57am UTC](https://community.auth0.com/t/unable-to-get-decoded-payload-of-jwt-from-auth0-express-jwt-library/47961 "2020-08-14T07:57:27Z")

</div>

I’m trying to obtain the decoded JWT payload using the express-jwt from auth0 as a middleware in my expressjs application. For the token to be used for authentication, I have to use a custom async function to process the…

---

## [Need help converting Javascript JWT parsing into Java using Auth0 libs](https://community.auth0.com/t/need-help-converting-javascript-jwt-parsing-into-java-using-auth0-libs/47387)

<div class="topic-metadata">

**Author:** [@jackiegleason](https://community.auth0.com/u/jackiegleason)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 2:06pm UTC](https://community.auth0.com/t/need-help-converting-javascript-jwt-parsing-into-java-using-auth0-libs/47387 "2020-08-04T14:06:33Z")

</div>

Hey everyone, Currently I am using the node-jsonwebtoken lib you guys put out to parse my JWT access token. I do this like… jwt.verify(accessToken, cert, { algorithms : "RSA256" }).then((err, parsed) =\>{...}); I would…

---

## [Validating Signature JWT with Certificate RS512](https://community.auth0.com/t/validating-signature-jwt-with-certificate-rs512/47005)

<div class="topic-metadata">

**Author:** [@luigi.siano](https://community.auth0.com/u/luigi.siano)\
**Replies:** 2\
**Last updated:** [July 28, 2020, 3:51pm UTC](https://community.auth0.com/t/validating-signature-jwt-with-certificate-rs512/47005 "2020-07-28T15:51:09Z")

</div>

Manualy validating the tokens signatures has been easy so far, I get the token and paste it on jwt.io and then I get my certificate and paste it on the PublicKey/Certificate field, and if the signature is valid it will s…

---

## [Auth0 .NET Core 3.1 JWT Authorization How](https://community.auth0.com/t/auth0-net-core-3-1-jwt-authorization-how/45616)

<div class="topic-metadata">

**Author:** [@imjason](https://community.auth0.com/u/imjason)\
**Replies:** 8\
**Last updated:** [July 9, 2020, 8:38pm UTC](https://community.auth0.com/t/auth0-net-core-3-1-jwt-authorization-how/45616 "2020-07-09T20:38:27Z")

</div>

Trying to understand how I can take roles or permissions in my Auth0 tenant and have them added to a token (Test or otherwise) and use that data to fulfill Policy Requirements as indicated in my .NET Core 3.1 WebApi code…

---

## [Custom claims require "http://" or "https:" prefix but only sometimes?](https://community.auth0.com/t/custom-claims-require-http-or-https-prefix-but-only-sometimes/45707)

<div class="topic-metadata">

**Author:** [@GeorgeCLT](https://community.auth0.com/u/GeorgeCLT)\
**Replies:** 4\
**Last updated:** [July 6, 2020, 3:56pm UTC](https://community.auth0.com/t/custom-claims-require-http-or-https-prefix-but-only-sometimes/45707 "2020-07-06T15:56:39Z")

</div>

We are running into problem with JWT token length as exchange in URL given our payload. We have added a number of custom claims which adds to to the size, especially repeating the namespace. We have experienmented with…

---

## [No tutorials on how to get and use authorization headers from logged in users? (VueJS, Vue-Apollo, Hasura, Auth0)](https://community.auth0.com/t/no-tutorials-on-how-to-get-and-use-authorization-headers-from-logged-in-users-vuejs-vue-apollo-hasura-auth0/45288)

<div class="topic-metadata">

**Author:** [@cigoler](https://community.auth0.com/u/cigoler)\
**Replies:** 1\
**Last updated:** [June 26, 2020, 4:51pm UTC](https://community.auth0.com/t/no-tutorials-on-how-to-get-and-use-authorization-headers-from-logged-in-users-vuejs-vue-apollo-hasura-auth0/45288 "2020-06-26T16:51:30Z")

</div>

I have a VueJS frontend, that connects via vue-apollo/Hasura/Graphql to a postgres database, anyway I can login and logout using Auth0 and it’s reflected back in my database and on the frontend. However I don’t have any …

---

## [Mocking SwaggerAPI that receives JWT](https://community.auth0.com/t/mocking-swaggerapi-that-receives-jwt/43280)

<div class="topic-metadata">

**Author:** [@danielzen](https://community.auth0.com/u/danielzen)\
**Replies:** 1\
**Last updated:** [June 24, 2020, 5:22pm UTC](https://community.auth0.com/t/mocking-swaggerapi-that-receives-jwt/43280 "2020-06-24T17:22:56Z")

</div>

I am helping with an app that requires all requests be made via a JWT that is signed by the client. Given a Swagger definition I would like to mock out a server that can accept and respond to these tokens. Swagger’s virt…

---

## [Validating the JWT token with database in php](https://community.auth0.com/t/validating-the-jwt-token-with-database-in-php/44851)

<div class="topic-metadata">

**Author:** [@urajesh647](https://community.auth0.com/u/urajesh647)\
**Replies:** 1\
**Last updated:** [June 23, 2020, 4:47pm UTC](https://community.auth0.com/t/validating-the-jwt-token-with-database-in-php/44851 "2020-06-23T16:47:04Z")

</div>

Hi guys, I am new to JWT and I have been working with JWT authentication in php. Generated the token with JWT::encode and send it through header and decoded by JWT::decode method. My problem is that how can I validate th…

---

## [How can I generate access token and refresh token together on a login of user..?](https://community.auth0.com/t/how-can-i-generate-access-token-and-refresh-token-together-on-a-login-of-user/44325)

<div class="topic-metadata">

**Author:** [@John.ICM](https://community.auth0.com/u/John.ICM)\
**Replies:** 2\
**Last updated:** [June 9, 2020, 12:10am UTC](https://community.auth0.com/t/how-can-i-generate-access-token-and-refresh-token-together-on-a-login-of-user/44325 "2020-06-09T00:10:48Z")

</div>

I am using Laravel framework with tymon JWT library trying to generate access token and refresh token together for a user login, kindly suggest the way to do it. thanks.

---

## [Jwt from external intranet to our site](https://community.auth0.com/t/jwt-from-external-intranet-to-our-site/43474)

<div class="topic-metadata">

**Author:** [@tecno](https://community.auth0.com/u/tecno)\
**Replies:** 0\
**Last updated:** [May 22, 2020, 11:38am UTC](https://community.auth0.com/t/jwt-from-external-intranet-to-our-site/43474 "2020-05-22T11:38:34Z")

</div>

We need to acces to a private some multimedia content pages, from an external intranet. The oter site, intranet, gace us auth key and secret key. In our tests everyhing is ok except, that thesemenus are accesible by a…

---

## [Validating a token using auth0 java-jwt library in Coldfusion; Plz hlp!](https://community.auth0.com/t/validating-a-token-using-auth0-java-jwt-library-in-coldfusion-plz-hlp/42038)

<div class="topic-metadata">

**Author:** [@bentsh](https://community.auth0.com/u/bentsh)\
**Replies:** 0\
**Last updated:** [April 29, 2020, 4:18pm UTC](https://community.auth0.com/t/validating-a-token-using-auth0-java-jwt-library-in-coldfusion-plz-hlp/42038 "2020-04-29T16:18:47Z")

</div>

I am trying to validate an ID token retrieved from Azure AD using the OIDC library msal.js. After I retrieve the token, I pass it in a request to the Coldfusion server. On the server I imported the auth0 Java-JWT library…

---

## [Jwt.io debugger and ESxxx validation](https://community.auth0.com/t/jwt-io-debugger-and-esxxx-validation/41716)

<div class="topic-metadata">

**Author:** [@fxmathieu](https://community.auth0.com/u/fxmathieu)\
**Replies:** 0\
**Last updated:** [April 24, 2020, 4:02pm UTC](https://community.auth0.com/t/jwt-io-debugger-and-esxxx-validation/41716 "2020-04-24T16:02:40Z")

</div>

Hi, Just a question about validation of signature token using ESS algorithm. Is it normal to reject a signature made with a certificate of a different ECDSA while standard Java signature verification allow it ? In oth…

---

## [Signature verification for Elliptic Curve](https://community.auth0.com/t/signature-verification-for-elliptic-curve/41648)

<div class="topic-metadata">

**Author:** [@fxmathieu](https://community.auth0.com/u/fxmathieu)\
**Replies:** 1\
**Last updated:** [April 24, 2020, 10:42am UTC](https://community.auth0.com/t/signature-verification-for-elliptic-curve/41648 "2020-04-24T10:42:54Z")

</div>

Hello, Receiving a JWT, I try to implement Signature validation for ES256, ES384 and ES512. I did it successfully for RSA types based on public certificate sent as content in JWT. I try to do the same for ES algorithm, …

---

## [Hooks and id\_token](https://community.auth0.com/t/hooks-and-id-token/41691)

<div class="topic-metadata">

**Author:** [@alain.bodiguel](https://community.auth0.com/u/alain.bodiguel)\
**Replies:** 2\
**Last updated:** [April 24, 2020, 8:32am UTC](https://community.auth0.com/t/hooks-and-id-token/41691 "2020-04-24T08:32:14Z")

</div>

Hi, I’m using a rule to enrich my id\_token with a “$namespace/permissions” claim. How can I do the same with a hook: using client credentials grant, my application expects to find the claim in order to validate the auth…

---

## [2 diretores for validate](https://community.auth0.com/t/2-diretores-for-validate/41357)

<div class="topic-metadata">

**Author:** [@carcleo](https://community.auth0.com/u/carcleo)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 9:05pm UTC](https://community.auth0.com/t/2-diretores-for-validate/41357 "2020-04-21T21:05:53Z")

</div>

I have the follows folders in my project: //here are the site/shopping administration site/admin site/admin/login //here are the place of clientes of shopping site/shopping site/dhopping/login if the client logg…

---

## [JWT Authentication example not working?](https://community.auth0.com/t/jwt-authentication-example-not-working/41216)

<div class="topic-metadata">

**Author:** [@rossyoung990](https://community.auth0.com/u/rossyoung990)\
**Replies:** 1\
**Last updated:** [August 29, 2023, 9:43pm UTC](https://community.auth0.com/t/jwt-authentication-example-not-working/41216 "2023-08-29T21:43:35Z")

</div>

Hi all I am trying to follow this JWT Authentication Auth0 Tutorial but as soon as I try to gradle build I get the below error. Has this occurred for anyone else? Stack Trace: 22:10:43.560 \[DEBUG\] \[TestEventLogger\] …

---

## [Spring Boot: Integrating User Login with JWT Authentication?](https://community.auth0.com/t/spring-boot-integrating-user-login-with-jwt-authentication/41214)

<div class="topic-metadata">

**Author:** [@rossyoung990](https://community.auth0.com/u/rossyoung990)\
**Replies:** 0\
**Last updated:** [April 16, 2020, 9:31pm UTC](https://community.auth0.com/t/spring-boot-integrating-user-login-with-jwt-authentication/41214 "2020-04-16T21:31:36Z")

</div>

Hi all this is my first post, hope someone can help me. I have followed the Spring Example in order to add JWT auth to my spring boot api and it worked great! I am now confused how to also add a User login/logout using…

---

## [JWT token signature verfied without secret key in https://jwt.io/](https://community.auth0.com/t/jwt-token-signature-verfied-without-secret-key-in-https-jwt-io/40993)

<div class="topic-metadata">

**Author:** [@coderkali](https://community.auth0.com/u/coderkali)\
**Replies:** 1\
**Last updated:** [April 14, 2020, 5:30pm UTC](https://community.auth0.com/t/jwt-token-signature-verfied-without-secret-key-in-https-jwt-io/40993 "2020-04-14T17:30:57Z")

</div>

I have used io.jsonwebtoken.Jwts to create a token in java application . To verify the token i just pasted in jwt.io , so its verified with out given secret key. Please check the website reproduce the same.

---

## [I have a jwt from an external source. Can I use it to auth to Auth0 so I can then authenticate to another application?](https://community.auth0.com/t/i-have-a-jwt-from-an-external-source-can-i-use-it-to-auth-to-auth0-so-i-can-then-authenticate-to-another-application/40950)

<div class="topic-metadata">

**Author:** [@goldbergjeffrey](https://community.auth0.com/u/goldbergjeffrey)\
**Replies:** 0\
**Last updated:** [April 13, 2020, 1:54pm UTC](https://community.auth0.com/t/i-have-a-jwt-from-an-external-source-can-i-use-it-to-auth-to-auth0-so-i-can-then-authenticate-to-another-application/40950 "2020-04-13T13:54:25Z")

</div>

Hi community, I have a friend that is working with a portal. Users authenticate to the portal using separate IdP. Once the user is authenticated and in the portal, the portal generates a JWT that gets sent to authorize …

---

## [Getting access token with audience(my API identifier) defined in my SPA, but aud decoded is still clientID of my SPA](https://community.auth0.com/t/getting-access-token-with-audience-my-api-identifier-defined-in-my-spa-but-aud-decoded-is-still-clientid-of-my-spa/40499)

<div class="topic-metadata">

**Author:** [@siyuewang.nina](https://community.auth0.com/u/siyuewang.nina)\
**Replies:** 5\
**Last updated:** [April 8, 2020, 10:06pm UTC](https://community.auth0.com/t/getting-access-token-with-audience-my-api-identifier-defined-in-my-spa-but-aud-decoded-is-still-clientid-of-my-spa/40499 "2020-04-08T22:06:24Z")

</div>

I am using reactjs for front end, hosting on localhost:3000 and localhost:8080 for spring boot backend I’m doing const token = await getTokenSilently({"audience":"http://localhost:8080/api"}); I also tried by adding a…

---

## [Here is a question I sent to Mosh Hamidani and Max SwartzMuller about storing authentication tokens on local storage](https://community.auth0.com/t/here-is-a-question-i-sent-to-mosh-hamidani-and-max-swartzmuller-about-storing-authentication-tokens-on-local-storage/40328)

<div class="topic-metadata">

**Author:** [@tamord](https://community.auth0.com/u/tamord)\
**Replies:** 7\
**Last updated:** [April 1, 2020, 2:17pm UTC](https://community.auth0.com/t/here-is-a-question-i-sent-to-mosh-hamidani-and-max-swartzmuller-about-storing-authentication-tokens-on-local-storage/40328 "2020-04-01T14:17:09Z")

</div>

Hi, My name is Mody Tal my email is: tamord@gmail.com and I have purchased and watched the video of the course: Angular - The Complete Guide (2020 Edition) Well, Just a small question, In lecture 303: “Auto Login” You …

---

## [ModuleNotFoundError: No module named 'Crypto' - while using pi3/google cloud IOT building jwt auth! Please help out](https://community.auth0.com/t/modulenotfounderror-no-module-named-crypto-while-using-pi3-google-cloud-iot-building-jwt-auth-please-help-out/40223)

<div class="topic-metadata">

**Author:** [@pooranakumare](https://community.auth0.com/u/pooranakumare)\
**Replies:** 1\
**Last updated:** [March 31, 2020, 8:46am UTC](https://community.auth0.com/t/modulenotfounderror-no-module-named-crypto-while-using-pi3-google-cloud-iot-building-jwt-auth-please-help-out/40223 "2020-03-31T08:46:10Z")

</div>

Am getting “Listed 0 Items” in Gcloud while subscribe using this Command " gcloud pubsub subscriptions pull --auto-ack projects/my project/subscriptions/my\_subscription I tried to run program in GCloud to find the issue…

[Previous page](https://community.auth0.com/c/jwt/8.md?page=5)

[Next page](https://community.auth0.com/c/jwt/8.md?page=7)
