I have a web app in PHP, and JS for front-end. I am connecting to Dcusign through the JWT and exchanging it for an access token, but I keep getting this error:

Decoding JWT did not work

UnexpectedValueException: "kid" invalid, unable to lookup correct key in /html/htdocs/mrt_dghehe/vendor/firebase/php-jwt/src/JWT.php:477

The code for JWT looks like this:

$now = time();
$payload = [
    'iss' => $clientId,
    'sub' => $apiUserId,
    'aud' => 'account-d.docusign',
    'scope' => 'signature impersonation',
    'iat' => $now,
    'exp' => $now + 3600 // 1 hour expiration
];
$privateKey = file_get_contents($privateKeyFilePath);
$jwt = JWT::encode($payload, $privateKey, 'RS256', $keypairID); //kid
$publicKey = file_get_contents('publicKey.key');

try
{
    $decodedJWT = JWT::decode($jwt,$publicKey);
    print_r($decodedJWT);
    echo "This is the decoded JWT";
}
catch(Exception $e)
{
    echo "Decoding JWT did not work";
    print($e);

Is the kid the equivalent of the Docusign Keypair ID? I am manually transmitting it when encoding the JWT but I do not even know if it's the right approach.

I have a web app in PHP, and JS for front-end. I am connecting to Dcusign through the JWT and exchanging it for an access token, but I keep getting this error:

Decoding JWT did not work

UnexpectedValueException: "kid" invalid, unable to lookup correct key in /html/htdocs/mrt_dghehe/vendor/firebase/php-jwt/src/JWT.php:477

The code for JWT looks like this:

$now = time();
$payload = [
    'iss' => $clientId,
    'sub' => $apiUserId,
    'aud' => 'account-d.docusign',
    'scope' => 'signature impersonation',
    'iat' => $now,
    'exp' => $now + 3600 // 1 hour expiration
];
$privateKey = file_get_contents($privateKeyFilePath);
$jwt = JWT::encode($payload, $privateKey, 'RS256', $keypairID); //kid
$publicKey = file_get_contents('publicKey.key');

try
{
    $decodedJWT = JWT::decode($jwt,$publicKey);
    print_r($decodedJWT);
    echo "This is the decoded JWT";
}
catch(Exception $e)
{
    echo "Decoding JWT did not work";
    print($e);

Is the kid the equivalent of the Docusign Keypair ID? I am manually transmitting it when encoding the JWT but I do not even know if it's the right approach.

• php
• jwt
• docusignapi

Share Improve this question Follow edited Mar 7 at 9:49 ADyson 62.2k1616 gold badges7979 silver badges9292 bronze badges Recognized by PHP Collective asked Mar 7 at 9:19 potatopotato 7911 silver badge44 bronze badges

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 1

You have to pass an Object of type Key to the decode-method, not the textual key itself.

$publicKey = new Key(file_get_contents('publicKey.key'), 'RS256');
$decodedJWT = JWT::decode($jwt, $publicKey);