48lv1 (48lv1) asked a question.
Unable to verify access token with jwt verifiter
Hi,
I'm using this library to verify access tokens: https://github.com/okta/okta-jwt-verifier-php
However in my case I' not using the "/default" suffix, not also in any of the other API calls I'm doing, because when I add it I get back an error message "You do not have permission to access the feature you are requesting".
When I remove the "/default" suffix from the verifier, metaData get "null" in my response (in the example in github, $jwtVerifier->metaData is null).
When I'm doing wrong?
Thanks in advanced!
Avishay
Hi Avishay!
Thank you for posting a question to the Help Center.
The permissions error may occur if you do not have the proper admin rights to make API calls for your Org. Please have a look at the following document:
https://help.okta.com/en/prod/Content/Topics/Security/Administrators.htm
At the bottom of the matrix, there is a set of roles for API Tokens. If you are making API calls without proper admin rights to the org, the API call will fail.
The "null" error is because the API call will fail without the "/default" suffix.
In order to resolve the issue, please make sure that you have appropriate Admin rights for your org. If you do, and this is still occurring, I would suggest that you open up a support ticket for this issue, and we can take a further look.
I hope this helps!
Thank you,
Brandon Wendorf
Technical Support Engineer