Jwt-auth: jwt.io says that token got 'Invalid Signature'

Created on 8 Oct 2015  路  8Comments  路  Source: tymondesigns/jwt-auth

I'm using Postman to test out this package.
Everything is working correctly, except for this bug on the jwt.io debugger.

I'm using JWTAuth::attempt($credentials) to issue the token.
Dumping credentials return this array : [ "email" => "[email protected]", "password" => "secret"].

The token works fine, only the signature is invalid.

I'm using the latest versions :
tymon/jwt-auth v5.5, laravel/framework v5.1.19

Most helpful comment

Are you pasting your secret key into the form? The field isn't very obvious on jwt.io, but in the blue "verify signature" section on the right there's a small box that says "secret".

All 8 comments

Are you pasting your secret key into the form? The field isn't very obvious on jwt.io, but in the blue "verify signature" section on the right there's a small box that says "secret".

I didn't notice that field, my bad.
The key is the one generated by the artisan command : jwt:generate.
Thanks @tdhsmith, I'm closing the issue :)

Yeah I miss it pretty much every time, haha.

@tdhsmith Thank you very much, I did not know that field was used, now everything makes sense. xD

Just to add a little context, there goes your secret key:
image

tes

When you enter a secret key into the form, it will change your JWT to match that key. You should re-paste the JWT to make sure the signature is valid.

@olliechick thanks, was having an existential crisis

Was this page helpful?
0 / 5 - 0 ratings

Related issues

Milos0110 picture Milos0110  路  49Comments

vsecades picture vsecades  路  26Comments

kennethtomagan picture kennethtomagan  路  25Comments

homeoftheunits picture homeoftheunits  路  29Comments

marijang picture marijang  路  53Comments