With Auth0, you can specify the algorithm used to sign your JWT tokens:
So in scenarios when you are signing JWTs with RSRS256
algorithm, you need to perform some changes in your ASP.NET Web Api in order to validate them properly.
NOTE: You can download your
.cer
file fromhttps://{YOU}.auth0.com/cer
endpoint.
From app.UseJwtBearerAuthentication
method, just replace SymmetricKeyIssuerSecurityTokenProvider
with X509CertificateSecurityTokenProvider
specifying your public signing key: