InvalidTokenError: Failed to fetch authorization server metadata about node-oauth2-jwt-bearer HOT 8 CLOSED

@adamjmcgrath I ended up using https://github.com/auth0/node-jwks-rsa/tree/master/examples/express-demo , it works for my scenario. Thank you

from node-oauth2-jwt-bearer.

Hi @rashidmya - thanks for raising this

Failed to fetch authorization server metadata

Your error tells me that the url for your issuer is incorrect or your issuer doesn't provide authorization server metadata

Could you let me know what value you are providing for your issuerBaseURL?

from node-oauth2-jwt-bearer.

the value of my issuerBaseURL is my client url: http://localhost:8000

from node-oauth2-jwt-bearer.

Hi @rashidmya - Your issuer is your identity provider (eg your-tenant.auth0.com)

from node-oauth2-jwt-bearer.

Hi @rashidmya - Your issuer is your identity provider (eg your-tenant.auth0.com)

Mate, Im having the same issue in express app

I tried with a combination of :

"audience": "https://MYAUDIENCE.au.auth0.com/api/v2/",
"issuerBaseURL": "https://TENANT.us.auth0.com",

The above did not work, I received:

{ "message": "no applicable key found in the JSON Web Key Set" }

So I tried the below:

"audience": "https://MYAUDIENCE.au.auth0.com/api/v2/",
   "issuer": "https://TENANT.us.auth0.com",
    "jwksUri": "https://TENANT.us.auth0.com/.well-known/jwks.json"

But I get:

{ "message": "Failed to fetch authorization server metadata" }

I'm not new to Auth0, have been successfully running production systems. But I created something from scratch for my personal project and its not working

from node-oauth2-jwt-bearer.

@meyvan - if you can share your value for TENANT I might be able to investigate.

@rashidmya - let me know if updating issuerBaseURL to your issuer worked for you and I'll close this issue

from node-oauth2-jwt-bearer.

@adamjmcgrath my tenant is dev-qnsy8uhz . please let me know if I'm doing something wrong

from node-oauth2-jwt-bearer.

"issuerBaseURL": "https://TENANT.us.auth0.com",

@meyvan I'm able to fetch your authz server metadata using https://dev-qnsy8uhz.us.auth0.com/.well-known/openid-configuration

I noticed that you're mixing au.auth0.com and us.auth0.com in places, could you perhaps be using the au one as your issuer by mistake? If not, then I can only assume your server is not connected to the internet?

from node-oauth2-jwt-bearer.