The specified alg value is not allowed RS256

[karloscodes]

Hi there In getting 'The specified alg value is not allowed' when trying to decrypt an auth0 token.
Here are the details:

decoded = jwt.decode(token, public_key,  algorithms=['RS256'])

Installed packages

PyJWT==1.4.2
cryptography==1.7.2
pycrypto==2.6.1
ecdsa==0.13

Python 2.7.12

Can you please tell what am I doing wrong?

[mikenholt]

It doesn't like the list type, so it should read algorithm='RS256'

[mark-adams]

@mikenholt No, that is incorrect. algorithms expects a list of algorithms when decoding.

@ccverak This really only happens for one reason: The JWT token does not have it's alg header set to "RS256" which probably means it was encoded using the wrong algorithm.