<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008C3jbCSAROkta Classic EngineIntegrationsAnswered2018-09-05T01:28:20.000Z2018-01-26T09:30:23.000Z2018-02-07T16:56:24.000Z

MaximeA.02094 (Customer) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:19 AM
Access Token signed with unknown signature (KID cannot be found anywhere)
Hi, i'm retrieving id_token and access_token with javascript SDK by signing in with username/password.

When passing access_token to my backend, signature cannot be verified. In fact, the kid claim in token header is different from those available in /default/v1/keys !

I have only one auth server. Any idea ?
  • 2 answers
  • 1.44K views

  • Thomas Kirk (Okta, Inc.)

    Hey Maxime,

     

    Can you provide the code snippet to better help debug? 

     

    My initial thought is that you are making the authorize call as /oauth2/v1/authorize instead of /oauth2/default/v1/authorize. 

     

    Also look at this: https://github.com/okta/okta-auth-js#openid-connect-options. You may need to set your issuer and authorizeUrl . Again, this is just a hunch so if you can can provide a code snippet that would be great.

     

    Expand Post

  • MaximeA.02094 (Customer)

    Hi, Thanks for your answer. I in fact had to specify the issuer in js SDK. I assumed it was automaticaly set from the url since it’s not specified either in the documentation sample. Here is the snippet i was using : var authClient = new OktaAuth({  // Org URL  url: 'https://dev-734663.oktapreview.com/',  // OpenID Connect APP Client ID  clientId: ‘...',  // Trusted Origin Redirect URI  redirectUri: 'http://localhost/login'  }); Adding this line made the process working : issuer: 'https://dev-734663.oktapreview.com/oauth2/default’, Greetings,
    Expand Post
This question is closed.
Loading
Access Token signed with unknown signature (KID cannot be found anywhere)