# Error while validating the JWT token. Reason: invalid signature

**URL:** <https://community.auth0.com/t/error-while-validating-the-jwt-token-reason-invalid-signature/140370>\
**Category:** Get Help\
**Tags:** authentication-sessions, sessions\
**Created:** [August 4, 2024, 5:54am UTC](https://community.auth0.com/t/error-while-validating-the-jwt-token-reason-invalid-signature/140370 "2024-08-04T05:54:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![erezst](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/erezst/32/59009_2.png) [@erezst](https://community.auth0.com/u/erezst)\
**Post date:** [August 4, 2024, 5:54am UTC](https://community.auth0.com/t/error-while-validating-the-jwt-token-reason-invalid-signature/140370/1 "2024-08-04T05:54:32Z")

</div>

Ready to post? 🔍 First, try searching for your answer.  
I connected an application to Auth0 and everything worked fine for a few weeks. But now, when try to log-in to my application using Chrome I get “Error while validating the JWT token. Reason: invalid signature”.  
This happened to several users, so it’s not local my computer. I can resolve by deleting cookies, but I want to avoid the situation. Any ideas what might be causing this and how to resolve?

---

<div class="post-metadata">

**Author:** ![remus.ivan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/remus.ivan/32/68771_2.png) [@remus.ivan](https://community.auth0.com/u/remus.ivan)\
**Post date:** [February 7, 2025, 11:35pm UTC](https://community.auth0.com/t/error-while-validating-the-jwt-token-reason-invalid-signature/140370/3 "2025-02-07T23:35:39Z")

</div>

Hi @erezst,

Welcome to the Auth0 Community and sorry for the late reply!

Most likely in this scenario you are not passing the **audience** claim to your request. That is basically the indented consumer of the token, typically the resource server. For that reason you might be getting an opaque token, so i would recommend checking out our [Validate Access Tokens Documentation](https://auth0.com/docs/secure/tokens/access-tokens/validate-access-tokens).

You can specify the audience in your request as described below:  
`"aud": "https://test-api"",`

More information about this can be checked under this [Knowledge Article](https://community.auth0.com/t/why-access-token-is-not-a-jwt-opaque-token/31028).

I hope this helped,  
Remus

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [February 21, 2025, 11:35pm UTC](https://community.auth0.com/t/error-while-validating-the-jwt-token-reason-invalid-signature/140370/4 "2025-02-21T23:35:54Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.