search

mcueto / djangorestframework-auth0

Library to simply use Auth0 token authentication in DRF within djangorestframework-jwt
MIT License
91 stars 19 forks source link

Not getting authentication to verify token correctly #33

Closed ToniTang closed 7 years ago

ToniTang commented 7 years ago

Hello! I'm super happy you made this awesome tool and I'm super excited to use it, however after trying for a little I can't seem to get my tokens that were granted by Auth0 to work.

The part that confuses me a little is where you say the 'aud' claim in the token must be the same as the client id, however my access tokens generated from Auth0 use the 'aud' claim to specify API identifiers, not the client id.

I'm using my non-interactive client created through Auth0 with the signing certificate for RS256 authentication, I also already followed your sample project but did not manage to get the configuration to work.

Thanks again!

ToniTang commented 7 years ago

Figured it out, ended up just using my API identifier as my client ID! I had the wrong client in mind.

mcueto commented 7 years ago

Excelent!!! thanks for use this tool :)