# Social Login with HS256

**URL:** <https://community.auth0.com/t/social-login-with-hs256/7604>\
**Category:** Get Help\
**Tags:** social, rs256, hs256, social-connections, login\
**Created:** [July 21, 2017, 3:56am UTC](https://community.auth0.com/t/social-login-with-hs256/7604 "2017-07-21T03:56:32Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![khadimfall0602](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/khadimfall0602/32/7820_2.png) [@khadimfall0602](https://community.auth0.com/u/khadimfall0602)\
**Post date:** [July 21, 2017, 3:56am UTC](https://community.auth0.com/t/social-login-with-hs256/7604/1 "2017-07-21T03:56:32Z")

</div>

I’m wondering if it is possible to create a social login and receive the JWT in HS256?

```
this.webAuth.authorize({
  connection: 'google-oauth2'
});

```

this is what i am using at the moment and i am only able to receive RS256 JWTs…

---

<div class="post-metadata">

**Author:** ![prashantT](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/prashantt/32/6002_2.png) [@prashantT](https://community.auth0.com/u/prashantT)\
**Post date:** [July 21, 2017, 6:18am UTC](https://community.auth0.com/t/social-login-with-hs256/7604/2 "2017-07-21T06:18:05Z")

</div>

You can change the JWT signature algorithm from the Client settings in the dashboard:

[https://manage.auth0.com/#/clients](https://manage.auth0.com/#/clients) \> Your Client \> Advanced Settings \> OAuth \> JsonWebToken Signature Algorithm.

---

<div class="post-metadata">

**Author:** ![khadimfall0602](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/khadimfall0602/32/7820_2.png) [@khadimfall0602](https://community.auth0.com/u/khadimfall0602)\
**Post date:** [July 22, 2017, 1:18am UTC](https://community.auth0.com/t/social-login-with-hs256/7604/3 "2017-07-22T01:18:26Z")

</div>

i already know that, but that does not work for social logins. They still RS256, thats my problem 🙂

---

<div class="post-metadata">

**Author:** ![richardpablop](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/richardpablop/32/7237_2.png) [@richardpablop](https://community.auth0.com/u/richardpablop)\
**Post date:** [September 4, 2017, 6:16pm UTC](https://community.auth0.com/t/social-login-with-hs256/7604/4 "2017-09-04T18:16:48Z")

</div>

I have the same issue, social login signs with RS256 no matter what we’ve setup in the Client settings

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [September 8, 2017, 3:54pm UTC](https://community.auth0.com/t/social-login-with-hs256/7604/5 "2017-09-08T15:54:17Z")

</div>

The procedure to configure the signing algorithm mentioned in another answer is correct.

However, have in mind that **in an OIDC compliant response the signing algorithm used for the ID Token is forced to `RS256`** if the client application performing the request is considered a [public client](https://auth0.com/docs/clients/client-types#public-clients) (this reference document also explains the reasoning behind the forced use of `RS256`).

If the client in question is indeed a public client then in an OIDC or API authorization flow the ID token is signed with `RS256`, which allows for the client to validate the token without the need of a shared secret which would not be suitable for a public client.

---

<div class="post-metadata">

**Author:** ![richardpablop](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/richardpablop/32/7237_2.png) [@richardpablop](https://community.auth0.com/u/richardpablop)\
**Post date:** [September 4, 2017, 6:16pm UTC](https://community.auth0.com/t/social-login-with-hs256/7604/6 "2017-09-04T18:16:48Z")

</div>

I have the same issue, social login signs with RS256 no matter what we’ve setup in the Client settings

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:55am UTC](https://community.auth0.com/t/social-login-with-hs256/7604/7 "2018-03-02T05:55:31Z")

</div>