Can't get the Authorization to work. about slim-jwt-auth HOT 2 CLOSED

You pass the secret key for verifying signature in the secret parameter. You must use the same secret for signing the token when you generate it.

$app->add(new \Slim\Middleware\JwtAuthentication([
    "secret" => "supersecretkeyyoushouldnotcommittogithub"
]));

I do not know how you generated the token, but looking at the example url above the header it tries to send is.

Authorization: Bearer r8uGz9YQFPLdmWQBHRU9eNYe2j3FP4rLQ9NgrShQTBv7FMxjaXnjhJcvUkXeh7gS

The token part is not a valid JWT.

Header with valid example JWT token looks something like below. You can also verify this. Token is signed using secret fearlex (you need to write that in the verify box).

Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYW1lIjoiQXJsZXlzIFJlc2NvIiwiYWRtaW4iOnRydWV9.Rvsr4CScemkXpY0qvA21iF1hD07yGiGZJSo9REoXYcE

To test Slim with the above token you must pass the correct secret of course.

$app->add(new \Slim\Middleware\JwtAuthentication([
    "secret" => "fearlex"
]));

Middleware itself expects to find the token in either the Authorization: Bearer header or cookie named token.

from slim-jwt-auth.

Thank you so much, your response help clarify a few things. I appreciate you taking your time to help and to build such an amazing tool.

Thanks again.

from slim-jwt-auth.