# JWT.io **URL:** https://community.auth0.com/c/jwt/8.md?page=7 [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) **Page:** 8 --- ## [Add ES256K support to the jwt.io debugger](https://community.auth0.com/t/add-es256k-support-to-the-jwt-io-debugger/39884)
**Author:** [@ph4r05](https://community.auth0.com/u/ph4r05)\ **Replies:** 1\ **Last updated:** [March 25, 2020, 12:47pm UTC](https://community.auth0.com/t/add-es256k-support-to-the-jwt-io-debugger/39884 "2020-03-25T12:47:24Z")
I noticed that ES256K is becoming increasingly popular. People are using jwt.io debugger to verify existing JWT tokens. Adding the ES256K would be great so others can verify also SECP256K1 tokens. --- ## [X509 Certificate validity in JWK](https://community.auth0.com/t/x509-certificate-validity-in-jwk/39603)
**Author:** [@david.salvador](https://community.auth0.com/u/david.salvador)\ **Replies:** 5\ **Last updated:** [March 19, 2020, 11:05am UTC](https://community.auth0.com/t/x509-certificate-validity-in-jwk/39603 "2020-03-19T11:05:01Z")
Hello, We have an Auth0 application that uses JWT’s signed with RS256. The RSA keypair used is generated by Auth0. With that keypair a self-signed X509 certificate is created which can later be found in .well-known/jwks… --- ## [Verifying at\_hash on rs256 id token without access token](https://community.auth0.com/t/verifying-at-hash-on-rs256-id-token-without-access-token/39551)
**Author:** [@ApartmentTherapy](https://community.auth0.com/u/ApartmentTherapy)\ **Replies:** 0\ **Last updated:** [March 17, 2020, 7:51pm UTC](https://community.auth0.com/t/verifying-at-hash-on-rs256-id-token-without-access-token/39551 "2020-03-17T19:51:56Z")
Hi, I saw a couple of other similar questions to mine in the community db but no answers. Hoping someone can shed some light. I have a client app that’s using the node js library to authenticate a user. It receives and … --- ## [Invalid access\_token](https://community.auth0.com/t/invalid-access-token/39304)
**Author:** [@sylvaingirard](https://community.auth0.com/u/sylvaingirard)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 7:26am UTC](https://community.auth0.com/t/invalid-access-token/39304 "2020-03-13T07:26:41Z")
Hi, Since a couple of days I’m getting invalid access\_tokens. It’s in this form 41-NESMPfNb39I7xbG0JyXiB6yDM-1Yw and I don’t seem to have changed anything that might have caused this. The that initiates authentication i… --- ## [Auth0 Android JWT library — private claim spec](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052)
**Author:** [@chrisbtoo](https://community.auth0.com/u/chrisbtoo)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 3:01pm UTC](https://community.auth0.com/t/auth0-android-jwt-library-private-claim-spec/28052 "2020-02-27T15:01:31Z")
I’m being sent a JWT with a private claim whose value is in the form of a JSON object. jwtdecode’s Claim class has methods to pull the value as one of several primitives, or as an array of objects, but no method to pull … --- ## [How to share or reuse secrete key in two or more java servers](https://community.auth0.com/t/how-to-share-or-reuse-secrete-key-in-two-or-more-java-servers/38487)
**Author:** [@mallikarjuna023](https://community.auth0.com/u/mallikarjuna023)\ **Replies:** 2\ **Last updated:** [February 26, 2020, 1:04pm UTC](https://community.auth0.com/t/how-to-share-or-reuse-secrete-key-in-two-or-more-java-servers/38487 "2020-02-26T13:04:19Z")
Hi, I am generating key like below public static final Key key = Keys.secretKeyFor(SignatureAlgorithm.HS256); each time when I am running java application, a new key is generated . and doing authorization based on that… --- ## [Store auth0 jwt token in the cookie](https://community.auth0.com/t/store-auth0-jwt-token-in-the-cookie/38299)
**Author:** [@eddiecooro](https://community.auth0.com/u/eddiecooro)\ **Replies:** 2\ **Last updated:** [February 23, 2020, 11:01am UTC](https://community.auth0.com/t/store-auth0-jwt-token-in-the-cookie/38299 "2020-02-23T11:01:31Z")
Hi. I’m working on a JAMStack website and we use auth0 for our authentication process. The problem is that I have some important logic on edge functions, that requires the authorization of the user. So I have to store … --- ## [Get the access token](https://community.auth0.com/t/get-the-access-token/38180)
**Author:** [@jorgnv](https://community.auth0.com/u/jorgnv)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 6:00pm UTC](https://community.auth0.com/t/get-the-access-token/38180 "2020-02-20T18:00:45Z")
need to get the token and it returns a lot of information getTokenSilently$(options?): Observable\ { return this.auth0Client$.pipe( concatMap((client: Auth0Client) =\> from(client.getTokenSilentl… --- ## [Unique identifier per user device inside JWT](https://community.auth0.com/t/unique-identifier-per-user-device-inside-jwt/37775)
**Author:** [@jamescammy](https://community.auth0.com/u/jamescammy)\ **Replies:** 2\ **Last updated:** [February 12, 2020, 12:03pm UTC](https://community.auth0.com/t/unique-identifier-per-user-device-inside-jwt/37775 "2020-02-12T12:03:51Z")
I’d like include a unique identifier per user device in the JWT (e.g. ios/android app) installation and have it stay the same to even after being issued a new JTW using the refresh token. Is this possible? --- ## [How does Resource server verifies token for HS256 or HS512](https://community.auth0.com/t/how-does-resource-server-verifies-token-for-hs256-or-hs512/37527)
**Author:** [@ethenhunt321](https://community.auth0.com/u/ethenhunt321)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 7:38am UTC](https://community.auth0.com/t/how-does-resource-server-verifies-token-for-hs256-or-hs512/37527 "2020-02-07T07:38:48Z")
I have created a token using any of the algorithm say HS256, when this is passed to resource server, I can see the implementation like below TokenValidationParameters validationParameters = new TokenValidationParameters… --- ## [Looking to sign the JWT with ECDSA (ES256) on Google Apps Script](https://community.auth0.com/t/looking-to-sign-the-jwt-with-ecdsa-es256-on-google-apps-script/37171)
**Author:** [@dimitri.leroux](https://community.auth0.com/u/dimitri.leroux)\ **Replies:** 2\ **Last updated:** [February 6, 2020, 11:03am UTC](https://community.auth0.com/t/looking-to-sign-the-jwt-with-ecdsa-es256-on-google-apps-script/37171 "2020-02-06T11:03:37Z")
Hi there! Thanks for this great threads of questions/answers. Not sure if that’s possible, but I’m getting stuck on GAS with ECDSA signature because there is no native library… I’m using HMAC but Token remains false. v… --- ## [Query on JWT access token](https://community.auth0.com/t/query-on-jwt-access-token/37073)
**Author:** [@kadamsandeep.1984](https://community.auth0.com/u/kadamsandeep.1984)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 9:41pm UTC](https://community.auth0.com/t/query-on-jwt-access-token/37073 "2020-01-30T21:41:40Z")
Where are the JWT access toke stored? Is JWT access token Stateless or Stateful? If this JWT access token is Stateful, do we really need to maintain session in nodejs Application. Else If this JWT access token is Sta… --- ## [Is it possible to get a JWT via a backend server and pass it to the front end client?](https://community.auth0.com/t/is-it-possible-to-get-a-jwt-via-a-backend-server-and-pass-it-to-the-front-end-client/36969)
**Author:** [@calvin1](https://community.auth0.com/u/calvin1)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 8:55pm UTC](https://community.auth0.com/t/is-it-possible-to-get-a-jwt-via-a-backend-server-and-pass-it-to-the-front-end-client/36969 "2020-01-30T20:55:29Z")
Is it possible to have a react app (SPA) send an email and password to a node server and then have the node server create the user and get a JWT from auth0, then pass back the JWT to the react app? The use case for this… --- ## [Https://jwt.io/ issue](https://community.auth0.com/t/https-jwt-io-issue/37011)
**Author:** [@slava-lu](https://community.auth0.com/u/slava-lu)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 11:39am UTC](https://community.auth0.com/t/https-jwt-io-issue/37011 "2020-01-29T11:39:57Z")
Why your debugging tool says that the signature is verifies with any secret put in the secrete field? Do I misunderstand something about how signature verification works? --- ## [Version missing in JWT podscpec 2.4.0 on Github](https://community.auth0.com/t/version-missing-in-jwt-podscpec-2-4-0-on-github/36766)
**Author:** [@mali1989](https://community.auth0.com/u/mali1989)\ **Replies:** 3\ **Last updated:** [January 23, 2020, 3:06pm UTC](https://community.auth0.com/t/version-missing-in-jwt-podscpec-2-4-0-on-github/36766 "2020-01-23T15:06:42Z")
Hi everyone, in the following podspec https://github.com/auth0/JWTDecode.swift/blob/2.4.0/JWTDecode.podspec the version is missing. As I need it for internal referencing purposes - could you please add the correspondi… --- ## [Cannot add standard claim to accessToken, only to idToken](https://community.auth0.com/t/cannot-add-standard-claim-to-accesstoken-only-to-idtoken/36597)
**Author:** [@fransf](https://community.auth0.com/u/fransf)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 2:09pm UTC](https://community.auth0.com/t/cannot-add-standard-claim-to-accesstoken-only-to-idtoken/36597 "2020-01-21T14:09:40Z")
I’m using a rule to add an email\_verified property into the access token. If I add it as a custom claim (e.g. http://mydomain/email\_verified) it works fine, however if I add it just as email\_verified, it gets dropped. S… --- ## [Is embedding the public key in client apps a bad idea?](https://community.auth0.com/t/is-embedding-the-public-key-in-client-apps-a-bad-idea/24012)
**Author:** [@berkant.ipek](https://community.auth0.com/u/berkant.ipek)\ **Replies:** 1\ **Last updated:** [April 16, 2019, 10:39am UTC](https://community.auth0.com/t/is-embedding-the-public-key-in-client-apps-a-bad-idea/24012 "2019-04-16T10:39:19Z")
I’m distributing a binary application (runs offline) to my customers and I give them license codes (created offline) as JWT tokens, signed with ES256. To verify the signature, I embed the public pair of the signing key i… --- ## [Auth0 generates a token which is signed a second in the future "iat" is incorrect](https://community.auth0.com/t/auth0-generates-a-token-which-is-signed-a-second-in-the-future-iat-is-incorrect/23046)
**Author:** [@Sethu](https://community.auth0.com/u/Sethu)\ **Replies:** 1\ **Last updated:** [April 4, 2019, 10:21am UTC](https://community.auth0.com/t/auth0-generates-a-token-which-is-signed-a-second-in-the-future-iat-is-incorrect/23046 "2019-04-04T10:21:33Z")
I am developing an application locally,.In the sense my API server is running locally. I am running an ‘implicit flow’ authentication and passing the access token obtained from Auth0 down to the API. The API rejects the … --- ## [Unable to set 'role' claim](https://community.auth0.com/t/unable-to-set-role-claim/22895)
**Author:** [@Modius](https://community.auth0.com/u/Modius)\ **Replies:** 3\ **Last updated:** [March 21, 2019, 3:52pm UTC](https://community.auth0.com/t/unable-to-set-role-claim/22895 "2019-03-21T15:52:49Z")
Greetings, I am trying to set the ‘role’ claim, for example: ‘role’ : ‘admin’ in the returned JWT. I’m adding it with a custom rule (is there another way?) The problem is that, much to my surprise, the documentation … --- ## [Cannot read property 'isZero' of undefined](https://community.auth0.com/t/cannot-read-property-iszero-of-undefined/20972)
**Author:** [@ahonarpour](https://community.auth0.com/u/ahonarpour)\ **Replies:** 1\ **Last updated:** [February 6, 2019, 8:37pm UTC](https://community.auth0.com/t/cannot-read-property-iszero-of-undefined/20972 "2019-02-06T20:37:01Z")
Having trouble generating a token when running code below: const token = jwt.sign(tokenPayload, tokenSecret, { algorithm: 'RS256' }); (where tokenSecret is a public key, same one used by server) If I don’t include the… --- ## [Not receiving "nickname" in JWT for new users](https://community.auth0.com/t/not-receiving-nickname-in-jwt-for-new-users/20241)
**Author:** [@nichfel](https://community.auth0.com/u/nichfel)\ **Replies:** 3\ **Last updated:** [January 19, 2019, 11:30am UTC](https://community.auth0.com/t/not-receiving-nickname-in-jwt-for-new-users/20241 "2019-01-19T11:30:52Z")
When creating new users, there is no nickname field in on the user profile or in the pure JSON for that user. Thus, when trying to login as this new user, the JWT returned does not have a nickname. Old users that were cr… --- ## [How can I add my JWT library to JWT.io website?](https://community.auth0.com/t/how-can-i-add-my-jwt-library-to-jwt-io-website/12910)
**Author:** [@miladrahimi](https://community.auth0.com/u/miladrahimi)\ **Replies:** 3\ **Last updated:** [January 3, 2019, 10:10pm UTC](https://community.auth0.com/t/how-can-i-add-my-jwt-library-to-jwt-io-website/12910 "2019-01-03T22:10:05Z")
I have created my own JWT library and now I’m interested in publishing it in JWT.io website, where I can make my request? --- ## [Obtaining 'base64-token' from Auth0 as Identity Provider](https://community.auth0.com/t/obtaining-base64-token-from-auth0-as-identity-provider/11864)
**Author:** [@armanfatahi](https://community.auth0.com/u/armanfatahi)\ **Replies:** 2\ **Last updated:** [January 2, 2019, 7:27pm UTC](https://community.auth0.com/t/obtaining-base64-token-from-auth0-as-identity-provider/11864 "2019-01-02T19:27:52Z")
Hello Auth0 community! I have spend a long time trying to setup Auth0 as identity provider t access AWS resources. But either my understanding is not enough or the documents are not enough. Here is the problem, I use A… --- ## [JWE through listed Libraries](https://community.auth0.com/t/jwe-through-listed-libraries/12065)
**Author:** [@dirrot.dev](https://community.auth0.com/u/dirrot.dev)\ **Replies:** 1\ **Last updated:** [December 27, 2018, 3:49pm UTC](https://community.auth0.com/t/jwe-through-listed-libraries/12065 "2018-12-27T15:49:00Z")
Please add “JWE Support information” to the listed libraries at jwt.io. --- ## [Jwt token validation using ECC in .net](https://community.auth0.com/t/jwt-token-validation-using-ecc-in-net/11027)
**Author:** [@rbharany1](https://community.auth0.com/u/rbharany1)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 4:02pm UTC](https://community.auth0.com/t/jwt-token-validation-using-ecc-in-net/11027 "2018-12-19T16:02:18Z")
I’m looking for a C# code sample that shows how to verify a JWT that has been created with ES256 against its corresponding public key pem. I’m struggling to find some samples that verify the signatures. Essentially, al… --- ## [How add additional claim after login?](https://community.auth0.com/t/how-add-additional-claim-after-login/18565)
**Author:** [@marcelodiasrib](https://community.auth0.com/u/marcelodiasrib)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 1:32pm UTC](https://community.auth0.com/t/how-add-additional-claim-after-login/18565 "2018-12-06T13:32:57Z")
Hi. I have two project (SPA and API Resource) After login using auth0, how I add new custom claim in API Resource? --- ## [net::ERR\_ABORTED during e2e tests visiting .well-known/jwks.json](https://community.auth0.com/t/net-err-aborted-during-e2e-tests-visiting-well-known-jwks-json/11224)
**Author:** [@jazzepi](https://community.auth0.com/u/jazzepi)\ **Replies:** 2\ **Last updated:** [December 5, 2018, 9:30pm UTC](https://community.auth0.com/t/net-err-aborted-during-e2e-tests-visiting-well-known-jwks-json/11224 "2018-12-05T21:30:14Z")
I’m working on a small startup and we are using cypress to run our tests. We have plans in the near future to factor our actually logging into our application for the majority of our e2e tests and only keep it to make su… --- ## [JWT.IO Devs - can you make available a query string so we can send a JWT as part of the page request?](https://community.auth0.com/t/jwt-io-devs-can-you-make-available-a-query-string-so-we-can-send-a-jwt-as-part-of-the-page-request/18056)
**Author:** [@chef.anton.69](https://community.auth0.com/u/chef.anton.69)\ **Replies:** 1\ **Last updated:** [November 20, 2018, 10:44pm UTC](https://community.auth0.com/t/jwt-io-devs-can-you-make-available-a-query-string-so-we-can-send-a-jwt-as-part-of-the-page-request/18056 "2018-11-20T22:44:37Z")
Hi jwt.io developers, Can you add a query string capability to jwt.io so we can directly send a jwt and have it displayed when we open the page? Something like: JSON Web Tokens - jwt.io What do you think? I want to i… --- ## [How do I get app\_metaData to appear in JWT authtoken for a machine to machine application?](https://community.auth0.com/t/how-do-i-get-app-metadata-to-appear-in-jwt-authtoken-for-a-machine-to-machine-application/17457)
**Author:** [@athomas](https://community.auth0.com/u/athomas)\ **Replies:** 2\ **Last updated:** [November 5, 2018, 10:09am UTC](https://community.auth0.com/t/how-do-i-get-app-metadata-to-appear-in-jwt-authtoken-for-a-machine-to-machine-application/17457 "2018-11-05T10:09:22Z")
I set application metadata on the machine to machine application, but I can’t seem to figure out how to get that data to appear in the authtoken. How do I do that? --- ## [Refreshing JWT with Rules applied after metadata update](https://community.auth0.com/t/refreshing-jwt-with-rules-applied-after-metadata-update/17384)
**Author:** [@punt](https://community.auth0.com/u/punt)\ **Replies:** 3\ **Last updated:** [November 6, 2018, 10:18am UTC](https://community.auth0.com/t/refreshing-jwt-with-rules-applied-after-metadata-update/17384 "2018-11-06T10:18:23Z")
I’m not sure if I’m just totally missing something but after calling the Management API to update a logged in user’s metadata how can I reissue the JWT? The returned JSON from the update call is a raw dump of the user a… [Previous page](https://community.auth0.com/c/jwt/8.md?page=6) [Next page](https://community.auth0.com/c/jwt/8.md?page=8)