{"action":"created","issue":{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/105","labels_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/105/labels{/name}","comments_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/105/comments","events_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/105/events","html_url":"https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/105","id":93889904,"number":105,"title":"Validating the token using jwt.io","user":{"login":"AlexZeitler","id":287480,"avatar_url":"https://avatars.githubusercontent.com/u/287480?v=3","gravatar_id":"","url":"https://api.github.com/users/AlexZeitler","html_url":"https://github.com/AlexZeitler","followers_url":"https://api.github.com/users/AlexZeitler/followers","following_url":"https://api.github.com/users/AlexZeitler/following{/other_user}","gists_url":"https://api.github.com/users/AlexZeitler/gists{/gist_id}","starred_url":"https://api.github.com/users/AlexZeitler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AlexZeitler/subscriptions","organizations_url":"https://api.github.com/users/AlexZeitler/orgs","repos_url":"https://api.github.com/users/AlexZeitler/repos","events_url":"https://api.github.com/users/AlexZeitler/events{/privacy}","received_events_url":"https://api.github.com/users/AlexZeitler/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/labels/external","name":"external","color":"bfe5bf"},{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/labels/question","name":"question","color":"cc317c"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-07-08T21:02:29Z","updated_at":"2015-07-09T20:23:58Z","closed_at":"2015-07-08T23:42:43Z","body":"I just tried to validate the token signature of `Certificate.cer` using http://jwt.io but it didn't.\r\nI extracted this public key: \r\n\r\n`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`\r\n\r\nI also tried using the content of the `Certificate.keys` and failed..."},"comment":{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/comments/120135391","html_url":"https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/105#issuecomment-120135391","issue_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/105","id":120135391,"user":{"login":"PinpointTownes","id":6998306,"avatar_url":"https://avatars.githubusercontent.com/u/6998306?v=3","gravatar_id":"","url":"https://api.github.com/users/PinpointTownes","html_url":"https://github.com/PinpointTownes","followers_url":"https://api.github.com/users/PinpointTownes/followers","following_url":"https://api.github.com/users/PinpointTownes/following{/other_user}","gists_url":"https://api.github.com/users/PinpointTownes/gists{/gist_id}","starred_url":"https://api.github.com/users/PinpointTownes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PinpointTownes/subscriptions","organizations_url":"https://api.github.com/users/PinpointTownes/orgs","repos_url":"https://api.github.com/users/PinpointTownes/repos","events_url":"https://api.github.com/users/PinpointTownes/events{/privacy}","received_events_url":"https://api.github.com/users/PinpointTownes/received_events","type":"User","site_admin":false},"created_at":"2015-07-09T20:23:58Z","updated_at":"2015-07-09T20:23:58Z","body":"Actually, it's not (luckily :smile:), but the `verify` method used internally by `jwt.io` (https://github.com/jsonwebtoken/jsonwebtoken.github.io/blob/master/js/jwt.js#L118) doesn't like the PEM format of the RSA public key and throws an exception caught by `jwt.io` (that never displays it btw...).\r\n\r\nThe issue is not about the algorithm, it's about the key format."}}