Invalid Token in JWT.io

[tyf]

Hey there @muhannadnaser !

@muhannadnaser

I was able to login and logout using the sample App.

That’s good to know!

It sounds like you might be missing an audience - You can add it like so:

final credentials = await auth0
    .webAuthentication()
    .login(audience: 'YOUR_AUTH0_API_IDENTIFIER');

The following FAQ may be helpful as well:

What is the Audience?

Question: What is the Audience? Answer: The audience parameter exists as part of the OAuth2.0 protocol. You can read more information from the specification here. What is it? The audience (presented as the aud claim in the access token) defines the intended consumer of the token. This is typically the resource server (API, in the dashboard) that a client (Application) would like to access. It can be added to the request to authorize i.e. audience: 'https://test-api' Here is an example where …

Keep us posted!