Auth0 JWT Malformed, also token is A256GCM

[pandeysandeep1190]

This is the problem on the backend (Apollo server)

[pandeysandeep1190]

I know i need to provide “audience” but its not helping

[pandeysandeep1190]

verifyToken file

const jwt = require(“jsonwebtoken”);
const jwksClient = require(“jwks-rsa”);

const verifyToken = async (bearerToken) => {
const client = jwksClient({
jwksUri: https://${process.env.AUTH0_DOMAIN}/.well-known/jwks.json,
});

function getJwksClientKey(header, callback) {
client.getSigningKey(header.kid, function (error, key) {
const signingKey = key.publicKey || key.rsaPublicKey;
callback(null, signingKey);
});
}

return new Promise((resolve, reject) => {
jwt.verify(
bearerToken,
getJwksClientKey,
{
audience: process.env.AUDIENCE,
issuer: https://${process.env.AUTH0_DOMAIN}/,
algorithms: [“RS256”],
},
function (err, decoded) {
if (err) reject(err);
resolve(decoded);
}
);
});
};

module.exports = { verifyToken };

[pandeysandeep1190]

@dan.woda pls help sir. im stuck on this for a while now…any help will be highly valued.

[dan.woda]

Hi @pandeysandeep1190,

See this FAQ: Why is my access token not a JWT? (Opaque Token)

[pandeysandeep1190]

Hey @dan.woda , i saw this FAQ, but i dont see how i my apply it to my case… i’m using the getAccessTokenSilently() and passing the token on Apollo server, and it says jwt malformed in the verfifyToken file.
Can you just provide me with a little detail please? I’ve just started using Auth0

[pandeysandeep1190]

Where actually do i need to provide this audience parameter?

[pandeysandeep1190]

This is how im dong it currently

[pandeysandeep1190]

@dan.woda pls help me out, im actually considering to quit Auth0, this is my first experience and its not really good.

[pandeysandeep1190]

Now i got an error saying consent is required

[dan.woda]

@pandeysandeep1190,

Have you seen this thread?

Error: Consent required while requesting getAccessTokenSilently