Why is this using HS256

[thedarkcder]

I have a question

Most off our APIs on auth0 are RS256 - which allows us to create a virtual api and use the same jwt token across each.

One of our requirements is the ability also to call wordpress api. However this plugin uses HS256 and not RS256. I'm wondering if this is by design or just legacy?

Is it possible to support RS256?

[joshcanhelp]

Hey there! It was mainly to reduce the complexity of the tutorial, to be honest. The Auth0 PHP SDK just had a major update and it might be easier to validate using RS256 now (I'm not sure, I don't maintain either library anymore). I'll try to take a look at this at some point and see if I can figure out how to support both 👍 a PR is welcome if you beat me to it!