Laravel JWT Auth Token invalid / Signature could not be verified - laravel

Question

I'm getting pretty tired of this error.. Stuck for 2 days now.
I do receive a token on valid credentials, but my token stays invalid, no matter if I pass it through url parameter (?token=[token]) or as Auth header (Bearer: [token]).
Anyone still experiencing this? I followed everything in the tutorial. Also configured both .htaccess in my public folder, and in my apache configuration.
Route::get('/test', function () {
return JWTAuth::parseToken()->authenticate();
});
Going to this route returns
TokenInvalidException in NamshiAdapter.php line 71:
Token Signature could not be verified.
For lookups, here is my authentication method from my AuthController.php
public function authenticate(Request $request) {
$credentials = $request->only('email', 'password');
$user = User::where('email', Input::get('email'))->first();
try {
if (!$token = JWTAuth::attempt($credentials)) {
return $this->respondUnauthorized();
}
} catch (JWTException $e) {
return $this->respondInternalError('Could not create token!');
}
// dd()
return $this->respond([
'token' => compact('token'),
'user' => $user]);
}
My routes middleware group:
Route::group(['middleware' => ['jwt.auth', 'jwt.refresh']], function() {
When I check line 71 in my NamshiAdapter and I dd() my token it says my secret is empty...
There must be something wrong? Is this just a minor bug or am I missing something?

Answer 1

in Laravel 5.5 (in my case):
1- Run the command:
php artisan jwt:secret
you should see this result:
jwt-auth secret [mygeneratedsecret] set successfully.
2- copy the secret, which is between the bracket (mygeneratedsecret) and add it to the .env file as following:
JWT_SECRET=mygeneratedsecret
3- Make sure your configuration file jwt.php has the secret set as following:
'secret' => env('JWT_SECRET'),
Important Note:
Don't forget to Re-generate the Token (using your login script or whatever you use), because the old token (before the secret configuration)
will still be invalid against the new secret
Happy Coding :)

Answer 2

I had the same issue
the solution is what jycr753 have said... "setting the api secret in jwt.php"
in fact on config/jwt.php, there is the line'secret' => env('JWT_SECRET'),,
Generate the key with this helper php artisan jwt:generate (for some reason I dont know why it doesnt set in the .env file itself like php artisan key:generate).
Copy the key (jwt-auth secret [DSvO98YtJ0204mBu9zqWN9QOMX7Tmvr9] set successfully.) without the bracket and add it in .env file like JWT_SECRET=DSvO98YtJ0204mBu9zqWN9QOMX7Tmvr9 or you can change it straigth in jwt.php secret' => env('DSvO98YtJ0204mBu9zqWN9QOMX7Tmvr9')