Robster•3mo ago

Could not verify token claim

I've been messing around with building my own auth, but an error has happened and I'm unsure what causes it auth.config.js:

export default {
    providers: [
        {
            type: "customJwt",
            issuer: "http://localhost:5173",
            applicationID: "convex-test",
            jwks: "http://localhost:5173/auth/jwks",
            algorithm: "RS256",
        },
    ],
};

export default {
    providers: [
        {
            type: "customJwt",
            issuer: "http://localhost:5173",
            applicationID: "convex-test",
            jwks: "http://localhost:5173/auth/jwks",
            algorithm: "RS256",
        },
    ],
};

/auth/jwks responds with:

{
  keys: [
    {
      kty: "RSA",
      alg: "RS256",
      kid: "convex-test-auth",
      use: "sig",
      n: PRIVATE_JWK_N,
      e: PRIVATE_JWK_E
    }
  ]
}

{
  keys: [
    {
      kty: "RSA",
      alg: "RS256",
      kid: "convex-test-auth",
      use: "sig",
      n: PRIVATE_JWK_N,
      e: PRIVATE_JWK_E
    }
  ]
}

jwt:

const token = jwt.sign(payload, PRIVATE_SIGN_JWT_KEY, {
    algorithm: "RS256",
    issuer: "http://localhost:5173",
    audience: "convex-test",
    expiresIn: "2h",
    header: {
        kid: "convex-test-auth",
    }
})

const token = jwt.sign(payload, PRIVATE_SIGN_JWT_KEY, {
    algorithm: "RS256",
    issuer: "http://localhost:5173",
    audience: "convex-test",
    expiresIn: "2h",
    header: {
        kid: "convex-test-auth",
    }
})

This is on a local convex Jwt with the jwk is valid. /auth/jwks is being called

2 Replies

Convex Bot•3mo ago

Thanks for posting in <#1088161997662724167>. Reminder: If you have a Convex Pro account, use the Convex Dashboard to file support tickets. - Provide context: What are you trying to achieve, what is the end-user interaction, what are you seeing? (full error message, command output, etc.) - Use search.convex.dev to search Docs, Stack, and Discord all at once. - Additionally, you can post your questions in the Convex Community's <#1228095053885476985> channel to receive a response from AI. - Avoid tagging staff unless specifically instructed. Thank you!

RobsterOP•2mo ago

I create my own jwt with the private, then I call setAuth and return this token in the first parameter function. Here is the error response: {"type":"AuthError","error":"Could not verify token claim","baseVersion":0,"authUpdateAttempted":true} My fault, missed the subject field

Could not verify token claim

Did you find this page helpful?