# Unable to verify jwt generated by jsrsasign

**URL:** <https://community.auth0.com/t/unable-to-verify-jwt-generated-by-jsrsasign/8768>\
**Category:** Get Help\
**Tags:** jwt, jwt-validation\
**Created:** [November 17, 2017, 10:58am UTC](https://community.auth0.com/t/unable-to-verify-jwt-generated-by-jsrsasign/8768 "2017-11-17T10:58:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![raghava.k2](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@raghava.k2](https://community.auth0.com/u/raghava.k2)\
**Post date:** [November 17, 2017, 10:58am UTC](https://community.auth0.com/t/unable-to-verify-jwt-generated-by-jsrsasign/8768/1 "2017-11-17T10:58:32Z")

</div>

Hi we are trying to generate JWT/JWS token from jsrsasign.js library using HS256 algorithm.  
And we successfully generated the token at front end and able to validate at front end.  
But when we pass the same token to server side which is using io.jsonwebtoken we are getting exception saying that signature is invalid.Below is the java code that we are using to validate the token.  
Jwts.parser().setSigningKey(secretKey).parseClaimsJws(incomming token);  
And the client side script for generating the token is same as provide in web site

```
// Header
var oHeader = {alg: 'HS256'};
// Payload
var oPayload = {};
var tNow = KJUR.jws.IntDate.get('now');
var tEnd = KJUR.jws.IntDate.get('now + 1day');
oPayload.iss = "http://foo.com";
oPayload.sub = "mailto:mike@foo.com";
oPayload.nbf = tNow;
oPayload.iat = tNow;
oPayload.exp = tEnd;
oPayload.jti = "id123456";
oPayload.aud = "http://foo.com/employee";
// Sign JWT, password=616161
var sHeader = JSON.stringify(oHeader);
var sPayload = JSON.stringify(oPayload);
var sJWT = KJUR.jws.JWS.sign("HS256", sHeader, sPayload, "616161");

```

The secrete key is same at both locations.  
Please provide code to verify the token at server side using java

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:57am UTC](https://community.auth0.com/t/unable-to-verify-jwt-generated-by-jsrsasign/8768/2 "2018-03-02T05:57:27Z")

</div>


