I was using lock embedded on a SPA. I retrieve the JWT after login and pass it to AWS lambda functions, which then use JsonWebToken library’s verify call to validate the signature of the token. The lambda functions have the secret key for the app, so with HS256 used as the algorithm there was no iss…

After wrestling this for hours, and reading various posts, I finally find the clue that even though I hadn’t asked for any of this OIDC compliant functionality, the fact that I requested an aud in the token means silently, Auth0 interprets this as meaning I want OIDC compliance. Fortunately I hadn’t…

Migrated to hosted login, JWT now alway RS256 and not HS256

JWT.io

system Closed August 10, 2019, 8:35am 4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Still get RS256 token JWT.io	3	2605	April 22, 2022
Server returns RS256 but HS256 is selected Get Help rs256 , hs256 , ios , token-validation , algorithm	6	6177	March 2, 2018
How to validate the jwt on server? Get Help login-experience , new-universal-login-experience	2	3289	August 18, 2023
Authorization API signs JWTs as RS256 when HS256 is selected Get Help token , rs256 , hs256 , algorithm	7	11614	March 2, 2018
Jwt verification error Get Help jwt , auth0	3	7544	September 4, 2019

Migrated to hosted login, JWT now alway RS256 and not HS256

Related topics