we are using this code to validate the JWT on the backend in response to a webhook event. refer: Authentication
import jwt from 'jsonwebtoken'
export const authenticate = (req, res, next) => {
const token = req.headers.authorization
if (!token) { return res.status(401).end() }
try {
res.locals.user = jwt.verify(token, JWT_SECRET);
console.log(res.locals.user)
} catch (e) {
console.error(e)
return res.status(401).end()
}
next()
};
we get back a token that is decodable but the signature is invalid. we also double checked the JWT_SECRET is set to the signing secret on
has anyone run into this?
