# \#rs256

**URL:** https://community.auth0.com/tag/rs256/172.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [Why do I need a private key to verify a JWT?](https://community.auth0.com/t/why-do-i-need-a-private-key-to-verify-a-jwt/129774)

<div class="topic-metadata">

**Author:** [@okneloper](https://community.auth0.com/u/okneloper)\
**Replies:** 4\
**Last updated:** [March 18, 2024, 4:14pm UTC](https://community.auth0.com/t/why-do-i-need-a-private-key-to-verify-a-jwt/129774 "2024-03-18T16:14:49Z")

</div>

Just looked at the video here RS256 vs HS256 What's the difference? and it says that for RS256 algorythm a private key is used to create a JWT signature and a public key is used to veirfy the signature. This makes total …

---

## [JWT creation using RS256](https://community.auth0.com/t/jwt-creation-using-rs256/49024)

<div class="topic-metadata">

**Author:** [@creative\_coder](https://community.auth0.com/u/creative_coder)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 9:02pm UTC](https://community.auth0.com/t/jwt-creation-using-rs256/49024 "2023-01-26T21:02:24Z")

</div>

I’m trying to create a JWT using RS256. I’ve generated a public and private certificates. .NET core is used to create the JWT. The following are the steps that I’m using to create the JWT. var header = base64URLencode(…

---

## [Couldn't using Signature Algorithm RS256](https://community.auth0.com/t/couldnt-using-signature-algorithm-rs256/12167)

<div class="topic-metadata">

**Author:** [@sunary](https://community.auth0.com/u/sunary)\
**Replies:** 1\
**Last updated:** [December 19, 2018, 11:21am UTC](https://community.auth0.com/t/couldnt-using-signature-algorithm-rs256/12167 "2018-12-19T11:21:22Z")

</div>

I set JsonWebToken Signature Algorithm is RS256, but express-jwt lib and jwt.io dectect that is HS256? below is my token generated from auth0.com: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL3BzdWNvZGVyL…

---

## [Verifying RS256 token using downloaded certificate](https://community.auth0.com/t/verifying-rs256-token-using-downloaded-certificate/8135)

<div class="topic-metadata">

**Author:** [@patrickrainier](https://community.auth0.com/u/patrickrainier)\
**Replies:** 7\
**Last updated:** [February 12, 2018, 4:51pm UTC](https://community.auth0.com/t/verifying-rs256-token-using-downloaded-certificate/8135 "2018-02-12T16:51:58Z")

</div>

I am able to successfully verify a RS256 token using the public key I extracted from the certificate which I downloaded on the clients page then I just passed that in my app as the secret. I am aware that the standard fo…

---

## [Id\_token retrieved in RS256 instead of HS256 (Auth0, Swift)](https://community.auth0.com/t/id-token-retrieved-in-rs256-instead-of-hs256-auth0-swift/8652)

<div class="topic-metadata">

**Author:** [@fivebyfiveyeah](https://community.auth0.com/u/fivebyfiveyeah)\
**Replies:** 1\
**Last updated:** [November 7, 2017, 9:18pm UTC](https://community.auth0.com/t/id-token-retrieved-in-rs256-instead-of-hs256-auth0-swift/8652 "2017-11-07T21:18:39Z")

</div>

The main native client I’m using is set to receive HS256 tokens. However, when I log in, these get sent out as RS256 and I’m getting an unauthorised error whenever I call the API I want to get access to. I’ve tried acce…

---

## [Social Login with HS256](https://community.auth0.com/t/social-login-with-hs256/7604)

<div class="topic-metadata">

**Author:** [@khadimfall0602](https://community.auth0.com/u/khadimfall0602)\
**Replies:** 5\
**Last updated:** [September 8, 2017, 3:54pm UTC](https://community.auth0.com/t/social-login-with-hs256/7604 "2017-09-08T15:54:17Z")

</div>

I’m wondering if it is possible to create a social login and receive the JWT in HS256? this.webAuth.authorize({ connection: 'google-oauth2' }); this is what i am using at the moment and i am only able to receive RS25…

---

## [RSASHA256 signature based on jwt.io by JavaScript](https://community.auth0.com/t/rsasha256-signature-based-on-jwt-io-by-javascript/7521)

<div class="topic-metadata">

**Author:** [@vinodtiwari10](https://community.auth0.com/u/vinodtiwari10)\
**Replies:** 1\
**Last updated:** [July 17, 2017, 3:22pm UTC](https://community.auth0.com/t/rsasha256-signature-based-on-jwt-io-by-javascript/7521 "2017-07-17T15:22:45Z")

</div>

How we can generate RSASHA256 signature based on jwt.io by JavaScript. I am able to create Header, Payload but unable to create signature as mentioned in jwt.io by JavaScript for RSASHA256. While i am able to do for SHA2…

---

## [Bad Algorithm Rejection with quickstart 03 -- jQuery calling an API](https://community.auth0.com/t/bad-algorithm-rejection-with-quickstart-03-jquery-calling-an-api/7526)

<div class="topic-metadata">

**Author:** [@pwayner](https://community.auth0.com/u/pwayner)\
**Replies:** 3\
**Last updated:** [July 15, 2017, 2:47am UTC](https://community.auth0.com/t/bad-algorithm-rejection-with-quickstart-03-jquery-calling-an-api/7526 "2017-07-15T02:47:40Z")

</div>

I pulled down the “Calling an API” example for jQuery, installed it and started it running. The main page comes up fine but I get an “invalid token” caused by an algorithm snafu. Everything seems to be configured for RS…

---

## [Auth0 lock client returns hs256 but need a rs256](https://community.auth0.com/t/auth0-lock-client-returns-hs256-but-need-a-rs256/6442)

<div class="topic-metadata">

**Author:** [@stef.morren](https://community.auth0.com/u/stef.morren)\
**Replies:** 2\
**Last updated:** [May 2, 2017, 10:35pm UTC](https://community.auth0.com/t/auth0-lock-client-returns-hs256-but-need-a-rs256/6442 "2017-05-02T22:35:41Z")

</div>

When i’m logging in on my client I receive a hs256 token but my ASP.NET Web Api backend only supports RS256. I did choose RS256 when you go to your client and then advanced settings → oauth. Can someone please explains …
