Cannot verify JWT with RS256 - invalid algorithm

Question

I am trying move my JWT Auth from secret phrase to RS256

here is example code:

import fs from 'fs'
import jwt from 'jsonwebtoken'

const private_key = fs.readFileSync('private.key')
const public_key = fs.readFileSync('public.pem')

const token = jwt.sign({
    some: 'payload'
}, private_key, { algorithm: 'RS256' })

const verified = jwt.verify(token, public_key)

Here is format of my public key:

And I am getting following error:

JsonWebTokenError: invalid algorithm

When I try to verify on jwt.io token is successfully signed.

this might be relevant: https://stackoverflow.com/questions/47119043/verifying-auth0-jwt-throws-invalid-algorigthm — Akber Iqbal, Mar 22 '22 at 05:38

score 1 · Accepted Answer · answered Nov 02 '18 at 18:17

Try this:

var fs = require('fs')
var jwt = require('jsonwebtoken')

const private_key = fs.readFileSync('private.key', 'utf8')
const public_key = fs.readFileSync('public.pem', 'utf8')


const token = jwt.sign({
    some: 'payload'
}, private_key, { algorithm: 'RS256' })

const verified = jwt.verify(token, public_key, { algorithms: 'RS256'})

private key:(private.key)

public key:(public.pem)

Thank you for taking time to respond, I am getting following error `Error: Something went wrong: PEM_read_bio_PUBKEY failed` — iamwtk, Nov 02 '18 at 18:52
but when I take it as is and create it in project, it works. Will dig deeper and let you know. — iamwtk, Nov 02 '18 at 18:59
With your keys it works, with mine it gives this error, so perhaps there is problem with my way of generating them, they look the same, just longer. Can you give me advice how you generated your keys above? — iamwtk, Nov 02 '18 at 19:04
Problem was in the keys which I generated ssh-keygen, when i generated keys with openssl it works. — iamwtk, Nov 02 '18 at 19:23
Is it necessary to store the public key with .pem extension and the private key with .key? — Zullu, Oct 27 '19 at 10:32

Cannot verify JWT with RS256 - invalid algorithm

1 Answers1

Linked