# Error occurred while verifying params unable to verify jwt token - Failed to verify JWS signature

**URL:** <https://builder.metamask.io/t/error-occurred-while-verifying-params-unable-to-verify-jwt-token-failed-to-verify-jws-signature/2038>\
**Category:** Embedded Wallets (Web3Auth)\
**Created:** [March 7, 2023, 1:21am UTC](https://builder.metamask.io/t/error-occurred-while-verifying-params-unable-to-verify-jwt-token-failed-to-verify-jws-signature/2038 "2023-03-07T01:21:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shahbaz](https://yyz1.discourse-cdn.com/flex011/user_avatar/builder.metamask.io/shahbaz/32/1527_2.png) [@shahbaz](https://builder.metamask.io/u/shahbaz)\
**Post date:** [March 7, 2023, 1:21am UTC](https://builder.metamask.io/t/error-occurred-while-verifying-params-unable-to-verify-jwt-token-failed-to-verify-jws-signature/2038/1 "2023-03-07T01:21:11Z")

</div>

> **🏛 Content from Web3Auth Community**
> 
> This topic was originally posted by **shahbaz** on 3/7/2023.  
> This content has been migrated from our previous community forum to preserve valuable discussions.

* * *

## Error occurred while verifying params unable to verify jwt token

---

<div class="post-metadata">

**Author:** ![shahbaz](https://yyz1.discourse-cdn.com/flex011/user_avatar/builder.metamask.io/shahbaz/32/1527_2.png) [@shahbaz](https://builder.metamask.io/u/shahbaz)\
**Post date:** [March 7, 2023, 1:23am UTC](https://builder.metamask.io/t/error-occurred-while-verifying-params-unable-to-verify-jwt-token-failed-to-verify-jws-signature/2038/2 "2023-03-07T01:23:01Z")

</div>

“Error occurred while verifying params unable to verify jwt token” error could be because of the following reasons:

- The verifier for your OpenLoginAdapter might be wrong. Check to make sure the `verifier` field is set correctly.
- The JWT is not signed with the correct key(JWK).
- The JWKS endpoint is not reachable or doesn’t return a valid JWK that was used to sign the JWT.
- The JWKS endpoint is incorrect on the Web3Auth Dashboard. Double-check to confirm the correct JWKS endpoint.  

[![image](https://canada1.discourse-cdn.com/flex011/uploads/metamaskbuilderhub/original/2X/4/445dfc481c1b66c8974449a92fa6d5e94f8a6186.png)
image1384×704 44.9 KB
](https://community.web3auth.io/community/community/uploads/default/original/1X/9ae19f7ee9cee82c9bf6b2e20500057e63b397a7.png "image")
- The JWKS is missing the `kid` field.
- The `kid` present in the JWT header is not present in the JWKS.

`sample jwks`:

```json
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "YOUR-KID", // <-- This is the kid.
      "n": "YOUR-N",
      "alg": "RS256" // <-- This is the algorithm.
    }
  ]
}

```

`sample jwks endpoint`: [https://www.googleapis.com/oauth2/v3/certs](https://www.googleapis.com/oauth2/v3/certs)