# JWE received instead of standard JWS

**URL:** <https://community.auth0.com/t/jwe-received-instead-of-standard-jws/142142>\
**Category:** Get Help\
**Tags:** rotating-refresh-tokens, sessions\
**Created:** [August 30, 2024, 4:32am UTC](https://community.auth0.com/t/jwe-received-instead-of-standard-jws/142142 "2024-08-30T04:32:58Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [August 30, 2024, 8:27pm UTC](https://community.auth0.com/t/jwe-received-instead-of-standard-jws/142142/3 "2024-08-30T20:27:42Z")

</div>

Hey there @gokul.er137 welcome to the community!

> [@gokul.er137](#):
>
> I am on the free tier so I don’t have JWE enabled. However, when setting up access tokens for session management, [jwt.io](http://jwt.io) indicates that my token is encrypted (it starts off like ey…).

I have a feeling that the token isn’t a JWE but instead [opaque](https://auth0.com/docs/secure/tokens/access-tokens#opaque-access-tokens) - Is the signing algorithm at [jwt.io](http://jwt.io) `dir` by any chance? If so, then you’re likely missing an [audience](https://community.auth0.com/t/what-is-the-audience/71414) param in your configuration. You can pass the audience in `authorizationParams`:

> **[AuthorizationParams | @auth0/auth0-react](https://auth0.github.io/auth0-react/interfaces/AuthorizationParams.html#audience)**
>
> Documentation for @auth0/auth0-react

---

_[View the full topic](https://community.auth0.com/t/jwe-received-instead-of-standard-jws/142142)._