Getting error: java.lang.IllegalStateException: Either 'payload' or 'claims' must be specified.

[ExtinctAmoeba]

Hi, I'm getting this error:

Getting: java.lang.IllegalStateException: Either 'payload' or 'claims' must be specified.

try {
String s = Jwts.builder().signWith(SignatureAlgorithm.HS256, "61c5fd4007060fd9ed41fc6f2a155a3a47629b9e9b83d75d1c0d97ebb177fa83").compact();
                            Jwts.parser().setSigningKey(s).parseClaimsJws(obj.getString(JSONNodes.json_token));

                            //OK, we can trust this JWT
                            app.getDatabase().beginTransaction();
                            app.user.setToken(obj.getString(JSONNodes.json_token));
                            app.getDatabase().commitTransaction();

                        } catch(SignatureException e) {
                            //Don't trust the JWT! Clear user or handle error messaging
                            app.clearUser();
                        }

What I'm missing or doing wrong?

1. I need to decode token (empty, there is no data inside, I just need simple token validation) from JSON response.

For example token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE0NTAzNDQ4NDcsImV4cCI6MTQ1MDM0NDkwNywidXNlcl9pZCI6bnVsbCwicmlnaHRzIjpudWxsfQ.p4v00qCakzuMZgLHAlzPB9o0z1DhLz8Ky03fmSaAxcc

[lhazlewood]

This line:

Jwts.builder().signWith(SignatureAlgorithm.HS256, "61c5fd4007060fd9ed41fc6f2a155a3a47629b9e9b83d75d1c0d97ebb177fa83").compact();

Is not signing anything. You've got to specify a payload or a claims to sign in that line.

But that line is specifically for creating tokens. If you already have one, you don't need to do that. Just call the Jwts.parser()... line.

[ExtinctAmoeba]

Thank You for information. I will try Your suggestion.

[ExtinctAmoeba]

 try {
            Jwts.parser().setSigningKey(C.TOKENKEY).parse(JWTToken);
        } catch (SignatureException e) {
            //don't trust the JWT!
        }

*Returns me SignatureException: * JWT signature does not match locally computed signature. JWT validity cannot be asserted and should not be trusted.

What does it mean? And what I'm doing wrong?

[lhazlewood]

use .parseClaimsJws instead of .parse

[lhazlewood]

Closing due to inactivity and no functionality changes discussed. Feel free to re-open if there is something to be done.