What does 'JWT must have 3 parts' mean?

Help
1

I know what this is saying and there was a github issue about this but it was closed by @ryan.chenkie who pointed to this code sample as the fix.

That code sample uses ‘access_token’ when calling an api. I followed the example exactly but keep getting the above error. I can authenticate, I receive the ‘authResult’ object but clearly ‘access_token’ is invalid as a bearer token. I have gotten my api to work using lock. I just thought I would try the hosted login (whish is enabled) based on the quickstart recommendations. Any ideas? Thanks.

2

It sounds like you may be getting an opaque access token instead of a JWT access token. To get a JWT access token you must have an API registered in the APIs section and you must use the identifier for it as the audience parameter in your auth0.WebAuth config.

Can you confirm that you have an API registered and that you are using its identifier as the audience parameter in your config?

1 Like
3

Hi Ryan. Yes I just confirmed that. There is also a trailing ‘/userinfo’ based on the example. Should that be something else? Thanks for helping.

4

Can audience be a local network IP address? I keep my angular app on one machine and my api on another machine. This might be the issue.

5

I have mostly figured it out. I had my settings wrong. I started Auth0 with a slightly different auth flow. You used to have client id and secrets and all that stuff. I remember the email a while back about this changing. Everything is working accept my api (.net core) is not sending ‘access-control-allow-orgin’ headers on the actual get requests (is on the optionis call, weird). The bearer token (from ‘access_token’) now looks correct when using jwt.io(https:jwt.io). My other problem is out of the scope of Auth0 so I will accept your answer. Thanks a bunch Ryan!

6

For Cors you can see my code here for what I did to address this:
https://github.com/jerriep/remote-map/blob/master/api/RemoteMapApi/Startup.cs#L57-L64

and

https://github.com/jerriep/remote-map/blob/master/api/RemoteMapApi/Startup.cs#L85

7

I have same error. I solve this this error.
Create new API in auth0. give Unique Identifier name. I took “NodeAPI”
I mention below config code.
auth0 = new auth0.WebAuth({ clientID: 'Hg3EhAWKgrPrX5UNGqFQA5vTbVGWF', domain: 'xyz.auth0.com', responseType: 'token id_token', audience: 'NodeAPI', redirectUri: 'http://localhost:4200/callback', scope: 'openid' });
Happy to help you

9

Adding these FAQs for further reading :books:

1 Like