auth0 / omniauth-auth0

OmniAuth strategy to login with Auth0
MIT License
125 stars 67 forks source link

Authentication failure! Signature verification raised: JWT::VerificationError #175

Closed kenan-memis closed 1 year ago

kenan-memis commented 1 year ago

Describe the problem

I am getting the following error when I am trying to follow the tutorial here

D, [2023-03-20T11:25:31.288851 #771] DEBUG -- omniauth: (auth0) Request phase initiated.
D, [2023-03-20T11:25:31.880871 #771] DEBUG -- omniauth: (auth0) Callback phase initiated.
E, [2023-03-20T11:25:32.104677 #771] ERROR -- omniauth: (auth0) Authentication failure! Signature verification raised: JWT::VerificationError, Signature verification raised

I checked multiple oauth gems and didn't see any similar issues. I was trying to upgrade the following gems:

Rails: from 6.1.4.7 to 6.1.7.3
omniauth: from 1.9.1 to 2.1.1
omniauth-auth0: from 1.4.2 to 3.1.0

Is there any suggestions where should I look? or anyone knows in which version update there were related changes?

What was the expected behavior?

Expected behavior is successful login!

Environment

My auth0 config:

Rails.application.config.middleware.use OmniAuth::Builder do
  provider(
    :auth0,
    ENV['AUTH0_CLIENT_ID'], ENV['AUTH0_CLIENT_SECRET'], ENV['AUTH0_DOMAIN'],
    callback_path: '/login/callback',
    authorize_params: {
      scope: 'openid profile'
    }
  )
end

Oauth related gems are:

oauth (0.5.6)
oauth2 (1.4.11)
  faraday (>= 0.17.3, < 3.0)
  jwt (>= 1.0, < 3.0)
  multi_json (~> 1.3)
  multi_xml (~> 0.5)
  rack (>= 1.2, < 4)
omniauth (2.1.1)
  hashie (>= 3.4.6)
  rack (>= 2.2.3)
  rack-protection
omniauth-auth0 (3.1.0)
  omniauth (~> 2)
  omniauth-oauth2 (~> 1)
omniauth-oauth2 (1.8.0)
  oauth2 (>= 1.4, < 3)
  omniauth (~> 2.0)
omniauth-rails_csrf_protection (1.0.1)
  actionpack (>= 4.2)
  omniauth (~> 2.0)

I am using