# Log in works but spits a invalid JWT?

**URL:** <https://community.auth0.com/t/log-in-works-but-spits-a-invalid-jwt/102383>\
**Category:** JWT.io\
**Tags:** jwt, api, react, auth0, login\
**Created:** [March 13, 2023, 12:05am UTC](https://community.auth0.com/t/log-in-works-but-spits-a-invalid-jwt/102383 "2023-03-13T00:05:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![fyll](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/fyll/32/45383_2.png) [@fyll](https://community.auth0.com/u/fyll)\
**Post date:** [March 13, 2023, 12:05am UTC](https://community.auth0.com/t/log-in-works-but-spits-a-invalid-jwt/102383/1 "2023-03-13T00:05:07Z")

</div>

After “loginWithRedirect” in React i get the access token using getAccessTokenSilently but it does not return a valid JWT

* * *

Here we injected the Auth0Provider into the app

```auto
import React from "react"
import { useNavigate } from "react-router-dom"
import { Auth0Provider } from "@auth0/auth0-react"

const Auth0ProviderWithHistory = ({ children }) => {
    const domain = process.env.REACT_APP_AUTH0_DOMAIN
    const clientId = process.env.REACT_APP_AUTH0_CLIENT_ID
    const audience = process.env.REACT_APP_AUTH0_AUDIENCE

    const navigate = useNavigate()

    const onRedirectCallback = appState => {
        navigate(appState?.returnTo || window.location.pathname)
    }

    return (
        <Auth0Provider
            domain={domain}
            clientId={clientId}
            onRedirectCallback={onRedirectCallback}
            redirectUri={window.location.origin}
            authorizationParams={{
                audience: audience,
            }}
        >
            {children}
        </Auth0Provider>
    )
}

export default Auth0ProviderWithHistory

```

* * *

Just a button that when you click you’ll get redirected to the login page

```javascript
import React from "react"
import { useAuth0 } from "@auth0/auth0-react"
import { FiLogIn } from "react-icons/fi"

const LoginButton = () => {
    const { loginWithRedirect } = useAuth0()

    return (
        <div className="user-bar">
            <FiLogIn />
            <div onClick={() => loginWithRedirect()}>Log In</div>
        </div>
    )
}

export default LoginButton

```

* * *

followed this doc [Page Not Found](https://auth0.com/docs/quickstart/spa/react/02-calling-an-api)  
if we call the getAccessTokenSilently with 0 parameters it does not change the output

```javascript
import React, { useEffect } from "react"
import { useAuth0 } from "@auth0/auth0-react"
import { FiLogOut } from "react-icons/fi"
import Cookies from "js-cookie"

const LogoutButton = () => {
    const { logout, user, getAccessTokenSilently } = useAuth0()

    useEffect(() => {
        const getUserMetadata = async () => {
            console.log(process.env.REACT_APP_AUTH0_AUDIENCE)

            try {
                const accessToken = await getAccessTokenSilently({
                    authorizationParams: {
                        audience: process.env.REACT_APP_AUTH0_AUDIENCE,
                        scope: "read:current_user",
                    },
                })
                console.log(accessToken)
                Cookies.set("jwt", accessToken) // Use the access token to authenticate with your backend
            } catch (e) {
                console.log(e.message)
            }
        }

        getUserMetadata()
    }, [getAccessTokenSilently, user])

    const handle_logout = () => {
        logout({
            returnTo: window.location.origin,
        })
        Cookies.remove("jwt")
    }

    return (
        <div className="user-bar">
            <FiLogOut />
            <div onClick={handle_logout}>Log Out</div>
        </div>
    )
}

export default LogoutButton

```

* * *

## for reference, this is the JWT

eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIiwiaXNzIjoiaHR0cHM6Ly9saXZlc2V5LmV1LmF1dGgwLmNvbS8ifQ..5H1ESxDrgJ3wPane.ti9ZD5erPQ3f731-wNk1m9UzDNU56keOMXzaBrUrE3DvspDI8TDLntZHxdP2xhXYa8Fi4at5cggOzywx07Y0MXWAHdLNTy7Dt9fRFTU6lqR\_6YcB0ezKeNueTg4dWVw8uQ2Te8n6Tfy3Syy8ghPW8TWo4vEYLDdJAx-237kzmjkBXsa3MNzKsTmbwbRQOT2nAcpsbT6UWu6HausquKk2JeVnL2Xx8B53voF05ZpEEoDsa1vuzcSRRN2TIUt4HFOpb1y5KSuZhluohDEQ3ldriu4LIPLWqVtBTnRRqcozhlHsD5ENa3dQKWskRFe9t3nyEzOdOQAfBNDWKoN0Vnsku4d7tGW1qVRHqkarBFEC-NcsybadNGTj4bCIUlHvce1wBxNhiv1FHLgpqZHUGdpaNsyMa343gfw.j9QRvNxZN-4Z5Ke-2i-asQ

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [March 13, 2023, 12:53pm UTC](https://community.auth0.com/t/log-in-works-but-spits-a-invalid-jwt/102383/2 "2023-03-13T12:53:46Z")

</div>

Hi @fyll,

Welcome to the Auth0 Community!

That appears to be an encrypted token. To get a JWT, you need to pass a valid audience param.

More here: [Why is my access token not a JWT? (Opaque Token)](https://community.auth0.com/t/why-is-my-access-token-not-a-jwt-opaque-token/31028)

---

<div class="post-metadata">

**Author:** ![paloskar](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/paloskar/32/45586_2.png) [@paloskar](https://community.auth0.com/u/paloskar)\
**Post date:** [March 19, 2023, 2:02pm UTC](https://community.auth0.com/t/log-in-works-but-spits-a-invalid-jwt/102383/4 "2023-03-19T14:02:54Z")

</div>

**What version of @auth0/auth0-react are you using?**

I had a similiar issue earlier this week where I got an error message saying “invalid compact JWS”. I was trying to access a protected api endpoint using an JWS obtained from the getAccessTokenSilently() method in the client.

I found that the error disappeared when downgrading @auth0/auth0-react from the latest 2.0.1 to 1.10.1.

I’ve made a repo demonstrating the issue here: [auth0-sandbox](https://github.com/poengen/auth0-sandbox)

Please download yourself and see if this works for you. Use package.json to switch between auth0-react versions.

Hope it helps!

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [March 22, 2023, 1:55pm UTC](https://community.auth0.com/t/log-in-works-but-spits-a-invalid-jwt/102383/5 "2023-03-22T13:55:57Z")

</div>

Hi @paloskar,

Thanks for the suggestion.

Before downgrading, I would suggest requesting a JWT by following the link I provided above.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 24, 2023, 1:51pm UTC](https://community.auth0.com/t/log-in-works-but-spits-a-invalid-jwt/102383/6 "2023-04-24T13:51:51Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.