Auth0 Authorization throws Unauthorized
<p>I try to implement Auth0 in my Single-Page-App using angular.</p>
<p>here are the scripts i loaded for auth0:</p>
<pre><code>&lt;!-- Auth0's lock widget library --&gt;
&lt;script type=&quot;text/javascript&quot; src=&quot;https://cdn.auth0.com/js/lock-9.0.js&quot;&gt;&lt;/script&gt;
&lt;!-- Angular cookie wrapper library for client cookies --&gt;
&lt;script type=&quot;text/javascript&quot; src=&quot;https://ajax.googleapis.com/ajax/libs/angularjs/1.5.8/angular-cookies.js&quot;&gt;&lt;/script&gt;
&lt;!-- Auth0's Angular SDK Library --&gt;
&lt;script type=&quot;text/javascript&quot; src=&quot;https://cdn.auth0.com/w2/auth0-angular-4.js&quot;&gt;&lt;/script&gt;
&lt;!-- Angular wrapper for localStorage and sessionStorage. Defaults to ng-cookies if not available --&gt;
&lt;script src=&quot;http://cdn.rawgit.com/auth0/angular-storage/master/dist/angular-storage.js&quot; type=&quot;text/javascript&quot;&gt; &lt;/script&gt;
&lt;!-- Angular wrapper library for JWT--&gt;
&lt;script src=&quot;http://cdn.rawgit.com/auth0/angular-jwt/master/dist/angular-jwt.js&quot; type=&quot;text/javascript&quot;&gt; &lt;/script&gt;
</code></pre>
<p>But the Token has an invalid Signature and is always unauthorized when i try the api call for the user information here : <a href="https://auth0.com/docs/api/authentication#!#get--userinfo" rel="nofollow noreferrer">Api to get user data</a></p>
<p>the token is stored in the local storage in the following eventhandler</p>
<pre><code>   authProvider.on('loginSuccess', ['$location', 'profilePromise', 'idToken', 'store',
          function($location, profilePromise, idToken, store) {

            profilePromise.then(function(profile) {
              store.set('user', profile.email);
              store.set('token', idToken);
            });

            $location.path('/');
        }]);
</code></pre>
<p>The debugger from jwt.io always says invalid Signature  when i try to decode my jwt even with my client secret.</p>
<p>Did i do something wrong ? Why is my token Signature invalid ? Why is my token unauthorized? Does the Api page even work on actual data ?</p>
<h2>EDIT:</h2>
<p>I found out that i used the wrong api call i used the one for auth0-access-tokens instead for JWTs.</p>
<p>But still the JWT Debugger shows invalid Signature</p>