I know what this is saying and there was a github issue about this but it was closed by @ryan.chenkie who pointed to this code sample as the fix. That code sample uses ‘access_token’ when calling an api. I followed the example exactly but keep getting the above error. I can authenticate, I receiv…

What does 'JWT must have 3 parts' mean?

Ryan_Chenkie June 23, 2017, 4:53am 2

It sounds like you may be getting an opaque access token instead of a JWT access token. To get a JWT access token you must have an API registered in the APIs section and you must use the identifier for it as the audience parameter in your auth0.WebAuth config.

Can you confirm that you have an API registered and that you are using its identifier as the audience parameter in your config?

1 Like

Not Throwing an Unauthorized Error with Auth0 / Spring Security / RESTEasy

Topic		Replies	Views
Your Examples "Angular 2+ Login" and "Angular 2+ Calling an API" Clarification Help auth0-endpoint-jwt	4	3841	July 25, 2019
Passing 1 audience to get access_token request, but returned access_token has 2 audience Help jwt	6	2760	April 12, 2022
JWT returned to callback has incorrect aud (audience) Help jwt , audience , angular2	6	12364	March 2, 2018
Invalid access_token JWT.io jwt , auth0	3	5372	March 28, 2020
"invalid credentials" calling userinfo Help jwt , api , userinfo	5	4991	June 20, 2020

What does 'JWT must have 3 parts' mean?

Related topics