Hi i have gotten the demo instructions <https permit demo el Permit #permit-saas

Hi, i have gotten the demo instructions(<https://p...

Yorrick Elzinga

09/28/2025, 10:53 AM

Hi, i have gotten the demo instructions(https://permit-demo-element.vercel.app/user-management) to work in my own app. But i cant manage to let my own permit elements work in my app. I had contact with Thomas before but we couldnt get it to work.

Ask Inkeep

09/28/2025, 10:53 AM

Hi @Yorrick Elzinga, I'm an AI assistant for Permit.io. I'll analyze available sources and get back to you shortly.

Ask Inkeep

09/28/2025, 10:53 AM

Since the demo is working but your own elements aren't, let's check the common integration points that often cause issues. First, ensure your JWKS configuration is properly set up in your Permit Dashboard (1) . Your Permit user key must match the JWT sub claim . You can verify your JWT sub at jwt.io . For the frontend integration, make sure you've installed the Permit-js SDK :

Copy code

npm install @permitio/permit-js

Then verify your login implementation matches this pattern for FrontendOnly login method :

Copy code

permit.elements
 .login({
 loginMethod: LoginMethod.frontendOnly,
 userJwt: "<YOUR_USER_JWT>",
 tenant: "<YOUR_TENANT_KEY>",
 envId: "<YOUR_ENV_ID>",
 })
 .then((res: any) => {
 console.log("success", res) ;
 })
 .catch((err: any) => {
 // you can handle the error either here or in your BE
 console.log("err", err) ;
 }) ;

Common login errors to check : • `USER_NOT_FOUND`: User doesn't exist in Permit or isn't assigned to the tenant • `TENANT_NOT_FOUND`: The tenant hasn't been created in Permit • `INVALID_PERMISSION_LEVEL`: The role is in Hidden Roles permission level • `FORBIDDEN_ACCESS`: User lacks permission to see the element After successful login, you should receive a

permit_session

cookie . To help debug further, could you share: 1. Which Workspace / Project / Env you are using 2. What SDK calls you're making (as code or CURL) 3. Which PDP version you're running 4. Any relevant logs from your PDP This will help identify the specific issue preventing your elements from working.

Ask Inkeep

09/28/2025, 10:53 AM

To learn more, see the sources I considered: [[1] Embedding Elements](https://docs.permit.io/embeddable-uis/embedding-elements)

Alon Boshi

09/28/2025, 10:59 AM

Hey @Yorrick Elzinga, thanks for reaching out, what's exactly not working for you? what do you see?

Yorrick Elzinga

09/29/2025, 6:35 AM

I am getting 404 errors, which look like they are coming from the permit/permit-js package( permit.ts elemtents.ts etc.) Also i am getting an error for the /me api call saying method not allowed

Or Weis

09/29/2025, 6:46 AM

Hi Yorrick, these sound like you still haven’t implemented the login correctly. I’m afraid, that’s something you’d have to accomplish first - we’re happy to provide guidance on specific items you need help with, but unfortunately we can’t implement this for you

Yorrick Elzinga

09/29/2025, 6:48 AM

I dont expect you to implement this but i have had a call with @Thomas he advised to make a new thread and wait for a developer who can assist me ont his

Or Weis

09/29/2025, 6:52 AM

You’d need to ask specific questions for us to be able to help you. We can’t help much with general “it doesn’t work” - e.g. a 404 error can come from many function calls and can mean many things.

Yorrick Elzinga

09/29/2025, 6:53 AM

Sure, i will put that in later today. Im at work right now and dont have the exact errors available

Or Weis

09/29/2025, 6:53 AM

Alright

Yorrick Elzinga

09/29/2025, 6:06 PM

When i use the same code as the demo but with my envid, tenant, and jwt im getting this error:

Copy code

{id: "3fed9f00d29d4f0aa2e154e4c09891a0", title: "The request was invalid", error_code: "INVALID_INPUT",…}
error_code
: 
"INVALID_INPUT"
id
: 
"3fed9f00d29d4f0aa2e154e4c09891a0"
message
: 
"We are sorry for the inconvenience, The JWT token could not be decoded, JWT ends with:kBbg. Please check the JWT token and try again.\nIf the issue keeps happening, contact our support on Slack for further guidance."
title
: 
"The request was invalid"

Yorrick Elzinga

09/29/2025, 6:06 PM

Copy code

Request URL
<https://api.permit.io/v2/auth/4e9eb067dd114f51950886a823c76c4b/elements_fe_login_as>
Request Method
POST
Status Code
400 Bad Request
Remote Address
3.130.119.152:443
Referrer Policy
strict-origin-when-cross-origin

permit support automation2

09/29/2025, 6:06 PM

Hey, thanks for reaching out ! It seems our team is a little busy right now, a human will be with you within the next hour or so. In the meantime, can I help you ?

Or Weis

09/29/2025, 6:25 PM

Seems that the JWT you provided is invalid or malformed,

The JWT token could not be decoded, JWT ends with:kBbg. Please check the JWT token and try again.\nIf the issue keeps happening, contact our support on Slack for further guidance.”

Yorrick Elzinga

09/29/2025, 6:29 PM

Yeah, im looking into it myself, what i notice when decoding my jwt in jwt.io with my jwks token which is in permito settings

Yorrick Elzinga

09/29/2025, 6:29 PM

I get an error

Yorrick Elzinga

09/29/2025, 6:29 PM

Copy code

Invalid public key format or structure.

Yorrick Elzinga

09/29/2025, 6:30 PM

Strange thing is the jwks should be right. when i paste it in permit changes the structure of the jwks so feels like permit is messing with it

Yorrick Elzinga

09/29/2025, 6:30 PM

jwt.io was also mentioning something about the 'kty' not being present but its the last value in my jwks

Yorrick Elzinga

09/29/2025, 6:31 PM

But when i pasted it permit it was 1st or 2nd

Yorrick Elzinga

09/29/2025, 6:47 PM

Copy code

The provided key is not a valid JWK. The 'kty' member must be present in a JWK as defined on RFC 7517.

Or Weis

09/29/2025, 6:57 PM

Can you please share your JWKS (it’s a public key- so okay to share) here; As well as the workspace/project/env) - if there’s a bug malforming your JWKS it will enable us to investigate CC: @Shuvy Ankor , @Alon Boshi

Yorrick Elzinga

09/29/2025, 7:03 PM

Copy code

{
  "keys": [
    {
      "e": "AQAB",
      "n": "nRmnPsDK49gtlYhnAq6pN6awGY7AcLyHK52GaHIhAmUiNI3dUpOg6vuMs5ZxPTWq5WD-5lu2KI72hHbV1XauoTMSnyepJXmRgaVCXj00lWbKrUcFfP0V3nF3RyzfDgBc3hY1JNkGVjH8v04slI8juyqhnYqKvHWy9CTzrW5988AZr56XwgnCx45y1TfKXo0hMKuHgvzN4yzXuSu5MlwIIGukw4d8NGby-m1z0aSdioJMBVc0rAQTefp_cDZJ9x5gU93NxxCMbtQUSerp7__1edEU0rqlSfxJr0z5Sjp66Tu6xm7VCFFS2puT3Fdwul-g1kD-asETY0eDHx_f14BdcQ",
      "kid": "key-1",
      "kty": "RSA"
    }
  ]
}

Yorrick Elzinga

09/29/2025, 7:08 PM

Workspace AI-Chatbot"Default Project: Development

Copy code

iframe i am trying to render 

<iframe
title="Permit Element user-management"
src="<https://embed.permit.io/user-management?envId=4e9eb067dd114f51950886a823c76c4b&darkMode=false>"
width="100%"
height="100%"
style="border: none;"/>

Yorrick Elzinga

09/29/2025, 7:11 PM

If you need more info let me know

Alon Boshi

09/30/2025, 8:56 AM

Hey @Yorrick Elzinga, checked also in jwt.io and you should insert there:

Copy code

{
  "e": "AQAB",
  "n": "nRmnPsDK49gtlYhnAq6pN6awGY7AcLyHK52GaHIhAmUiNI3dUpOg6vuMs5ZxPTWq5WD-5lu2KI72hHbV1XauoTMSnyepJXmRgaVCXj00lWbKrUcFfP0V3nF3RyzfDgBc3hY1JNkGVjH8v04slI8juyqhnYqKvHWy9CTzrW5988AZr56XwgnCx45y1TfKXo0hMKuHgvzN4yzXuSu5MlwIIGukw4d8NGby-m1z0aSdioJMBVc0rAQTefp_cDZJ9x5gU93NxxCMbtQUSerp7__1edEU0rqlSfxJr0z5Sjp66Tu6xm7VCFFS2puT3Fdwul-g1kD-asETY0eDHx_f14BdcQ",
  "kid": "key-1",
  "kty": "RSA"
}

without the "keys" array

Alon Boshi

09/30/2025, 8:57 AM

Taking a look and will circle back to you

Yorrick Elzinga

09/30/2025, 9:09 AM

Ah i see, then i am not getting an error in jwt.io indeed

Yorrick Elzinga

09/30/2025, 9:12 AM

this call returns : https://api.permit.io/v2/auth/4e9eb067dd114f51950886a823c76c4b/elements_fe_login_as

Copy code

{
  "detail": "Method Not Allowed"
}

Alon Boshi

09/30/2025, 9:19 AM

Can you share your login method please?

Yorrick Elzinga

09/30/2025, 9:21 AM

Copy code

'use client';

import permit, { LoginMethod } from '@permitio/permit-js';
import { useEffect } from 'react';
// Use a JWT token to authenticate to <http://Permit.io|Permit.io>
export default function PermitDemoYorrick() {
    // Use a JWT token to authenticate to <http://Permit.io|Permit.io>
    const loginOptions = {
        loginMethod: LoginMethod.frontendOnly,
        userJwt:
            'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleS0xIn0.eyJzdWIiOiI4Y2YxZWMxOC0xNzJmLTRmZDUtODJlNS1kNGIzYWM3ZmM2YWUiLCJ1c2VyX2lkIjoiOGNmMWVjMTgtMTcyZi00ZmQ1LTgyZTUtZDRiM2FjN2ZjNmFlIiwiaHR0cHM6Ly9wZXJtaXQuaW8vdGVuYW50IjoiZGVmYXVsdCIsImh0dHBzOi8vcGVybWl0LmlvL2VudiI6IjRlOWViMDY3ZGQxMTRmNTE5NTA4ODZhODIzYzc2YzRiIiwiaXNzIjoiaHR0cHM6Ly9kZWZhdWx0LnBlcm1pdC5pbyIsImF1ZCI6WyJodHRwczovL2RlZmF1bHQucGVybWl0LmlvIl0sImlhdCI6MTc1OTIyMzM4NCwiZXhwIjoxNzU5MjI2OTg0fQ.Ju2FwmNzy77Xl0Eo_A19S3_ZlBgYmOunURRkXm7VI3K-opeD3fCsJikNkRKsOEpLHQaMpztp9mYl2mwqtR11UGkaG9d1UlR_xx1Sgsi7cyGnuu8G72SQXsvVL6fg0ATATa2hJ8N-Zim_GDQ5_R1c3kY2CnFaXbF9aVTiumHq7I5QS_UlGpIA0G-EQA0bhoEEtHRAOvGKV95ma9_7fSvJYAI3X3Z0Sb3o_MNq-M7pGkNitxAXPfCPbdgudLVxYDEvQDzlflpNSw7FCjdXedliWSXytf_oBN8zRid7vvEHp6qpATsVz0Wg5fA5LB_cuvkvxG9jcN9qSldHOAGKmKQXMg',
        tenant: 'default',
        envId: '4e9eb067dd114f51950886a823c76c4b',
    };

    permit.elements
        .login(loginOptions)
        .then(() => {
            console.log('Successfully authenticated with <http://Permit.io|Permit.io>');
        })
        .catch((err) => {
            console.error('Login error:', err);
        });

    return (
        <iframe
            src="<https://embed.permit.io/user-management?envId=4e9eb067dd114f51950886a823c76c4b&darkMode=false>"
            style={{ border: 'none', width: '100%', height: '500px' }}
            title="<http://Permit.io|Permit.io> Element"
            allow="clipboard-write"></iframe>
    );
}

Yorrick Elzinga

09/30/2025, 9:24 AM

Im running my app in a docker container, which logs this error:

Copy code

nextjs-dev    | Login error: ReferenceError: document is not defined
nextjs-dev    |     at PermitElements.eval (../src/elements.ts:108:24)
nextjs-dev    |     at Generator.next (<anonymous>)
nextjs-dev    |     at new Promise (<anonymous>)
nextjs-dev    |     at PermitElements.login (../src/elements.ts:102:41)
nextjs-dev    |     at PermitDemoYorrick (src/components/permit/PermitDemoYorrick.tsx:17:9)
nextjs-dev    |   15 |
nextjs-dev    |   16 |     permit.elements
nextjs-dev    | > 17 |         .login(loginOptions)
nextjs-dev    |      |         ^
nextjs-dev    |   18 |         .then(() => {
nextjs-dev    |   19 |             console.log('Successfully authenticated with <http://Permit.io|Permit.io>');
nextjs-dev    |   20 |         })

Alon Boshi

09/30/2025, 10:06 AM

Try to wrap the login call inside a

useEffect

hook to ensure it only runs on the client side

Alon Boshi

09/30/2025, 10:08 AM

Copy code

export default function PermitDemoYorrick() {
    useEffect(() => {
        const loginOptions = {.......

Yorrick Elzinga

09/30/2025, 10:17 AM

That fixed the errors in the docker container thnx

Yorrick Elzinga

09/30/2025, 10:19 AM

this https://api.permit.io/v2/auth/4e9eb067dd114f51950886a823c76c4b/elements_fe_login_as still returns 400 error:

Yorrick Elzinga

09/30/2025, 10:20 AM

https://4e9eb067dd114f51950886a823c76c4b.embed.api.permit.io/v2/auth/me returns 401

Alon Boshi

09/30/2025, 11:15 AM

can you ensure that you put the accurate env id and tenant?

Yorrick Elzinga

09/30/2025, 11:15 AM

I have double checked that with @Thomas

Yorrick Elzinga

09/30/2025, 11:15 AM

but i can screenshot it for you

Alon Boshi

09/30/2025, 11:16 AM

and your user is part of the tenant?

Yorrick Elzinga

09/30/2025, 11:16 AM

only thing i can image the sub must be the email

Yorrick Elzinga

09/30/2025, 11:16 AM

ive tried that didnt seem to work

Yorrick Elzinga

09/30/2025, 11:17 AM

image.png,image.png,image.png

Yorrick Elzinga

09/30/2025, 11:21 AM

I changed sub to my email instead of the userid, still same error

Yorrick Elzinga

09/30/2025, 11:22 AM

"We are sorry for the inconvenience, The JWT token could not be decoded, JWT ends with:vRmw. Please check the JWT token and try again.\nIf the issue keeps happening, contact our support on Slack for further guidance."

Alon Boshi

09/30/2025, 11:26 AM

i think i found your issue, i need you to Configure your JWKS at https://app.permit.io/settings/jwks-config to your env with this:

Copy code

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "n": "whtkYG3N8cFdj9NURXrGYnIlutaywFi_YYoQZdiU1yylG_qa0cI1m7hkbWAN2E2SevE2qXcyfJYaquckRiXEQgfL9VF4SDzzs5Zz6OlseVWjBBVXWEHm64TmBhr1zW7d8aB27dp4RcwWfrRUQ3onj4hA2Pp7Yo6wmkobRTMJEKe462DWWMT5Ta_AtTI1qONvOWe3iI_3rgiJ8VjuZvpPtsMtnWxLX_6vEqliwIw-RN6wmruQz1VGY-z1Bej5lVIwNRivqVxfXDviJXlGpxG-AqLOgpe1Ml4tlaCn7ciHlgR4CYKR72bKaJ9c--WLZyrVDtNJmwKm2JDZQkPNFXH7Sw",
      "e": "AQAB",
      "kid": "GoThkFRLnESuNS37R6vKM",
      "x5t": "gsVSPfe5kAUlgnQiO6wNX78I5IA",
      "x5c": [
        "MIIDETCCAfmgAwIBAgIJIouz3DZAIjt5MA0GCSqGSIb3DQEBCwUAMCYxJDAiBgNVBAMTG3Byb2QtcGVybWl0LWlvLnVzLmF1dGgwLmNvbTAeFw0yMTEyMDUxMTA2MDlaFw0zNTA4MTQxMTA2MDlaMCYxJDAiBgNVBAMTG3Byb2QtcGVybWl0LWlvLnVzLmF1dGgwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMIbZGBtzfHBXY/TVEV6xmJyJbrWssBYv2GKEGXYlNcspRv6mtHCNZu4ZG1gDdhNknrxNql3MnyWGqrnJEYlxEIHy/VReEg887OWc+jpbHlVowQVV1hB5uuE5gYa9c1u3fGgdu3aeEXMFn60VEN6J4+IQNj6e2KOsJpKG0UzCRCnuOtg1ljE+U2vwLUyNajjbzlnt4iP964IifFY7mb6T7bDLZ1sS1/+rxKpYsCMPkTesJq7kM9VRmPs9QXo+ZVSMDUYr6lcX1w74iV5RqcRvgKizoKXtTJeLZWgp+3Ih5YEeAmCke9mymifXPvli2cq1Q7TSZsCptiQ2UJDzRVx+0sCAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU3g+/8HGoZCg4CSjB2ENQREbZsKowDgYDVR0PAQH/BAQDAgKEMA0GCSqGSIb3DQEBCwUAA4IBAQAfs70lODKnjw3QR5OYaxasDDTzEml0ca89QAYPr8T/br9SXXNgQr1fOgMd6L0ZAB9QBtxsROsc2qtrlOLruEEFKmczNx03acor5otOpLMUPa3FE5WA+4uvwTpkqWT16hmtUxEyn/6am0Jaanz8tOVEYuBlycfmXcZk00jHOYmAxVumTmLrXnguhdSaJn9yLl9vy5/KHD49asiYE7hARYvTkkRHWWsCJOCzYb+8j6Soo7025EOYpRBPSMlo/GDpGVMLqdJlV1RX1VYY//6wIj7aReuSlNB0AqzZ45mFY3HI/EatNa0pJ6tkUP+xON9XTeLMZ9Ny6bc7M/vgSVMIulUP"
      ],
      "alg": "RS256"
    },
    {
      "kty": "RSA",
      "use": "sig",
      "n": "2sOuaIKjrYJw4yAcnVjeDEcEZjzQTUlg8s2_vx6rq-L3UCPoEc1s_kHBpqw0ZyNcplngtlqVC9vYtL51oGI3I1EX6WzMzWQGShXfVNxzW2HlQSpRUwCXZKaVH4K9bhE7MXnuIjQRhrNAOxP3ot_u-JuXCAbjcZHitESAzRFIKglhi7m_wecut_Z5XXEKaGlAKTT65-ouw17hZ1v3T9BlDSpaw-o3ckd6tJ9icWV-D2jQlmqnxsH5n5TSekFocc5JqVR6zkS7WHqkE7nbGrDr85VgyZ453Y7LKRphLa-J2WvZ5wSaG15Yidb7ZnTAG88A3aSb9gs_G4Q0_ln1-xFh9Q",
      "e": "AQAB",
      "kid": "4B95Zwy7anlgGvbfPRUFf",
      "x5t": "Co4yo_8w0TBa4jYh_8GiJ5oV9eY",
      "x5c": [
        "MIIDETCCAfmgAwIBAgIJLCV9bshilngoMA0GCSqGSIb3DQEBCwUAMCYxJDAiBgNVBAMTG3Byb2QtcGVybWl0LWlvLnVzLmF1dGgwLmNvbTAeFw0yMTEyMDUxMTA2MDlaFw0zNTA4MTQxMTA2MDlaMCYxJDAiBgNVBAMTG3Byb2QtcGVybWl0LWlvLnVzLmF1dGgwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANrDrmiCo62CcOMgHJ1Y3gxHBGY80E1JYPLNv78eq6vi91Aj6BHNbP5BwaasNGcjXKZZ4LZalQvb2LS+daBiNyNRF+lszM1kBkoV31Tcc1th5UEqUVMAl2SmlR+CvW4ROzF57iI0EYazQDsT96Lf7viblwgG43GR4rREgM0RSCoJYYu5v8HnLrf2eV1xCmhpQCk0+ufqLsNe4Wdb90/QZQ0qWsPqN3JHerSfYnFlfg9o0JZqp8bB+Z+U0npBaHHOSalUes5Eu1h6pBO52xqw6/OVYMmeOd2OyykaYS2vidlr2ecEmhteWInW+2Z0wBvPAN2km/YLPxuENP5Z9fsRYfUCAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUeH45CveZIoUpbKvTsA861eXuYDUwDgYDVR0PAQH/BAQDAgKEMA0GCSqGSIb3DQEBCwUAA4IBAQCIDoDCQ0uJuEVv3/kq6LzN14+OFH7oUF3FyAqGLyaH+TQtWu7fGb5yF7CDauSB6Y06OV1WALV4InImryib+B/dtdPm+J+SfuW4M4nFiu7w+tYzVnLr28qZNsIHYwa/z+Z9/9yn00t/CUlaZ8ExpTr8ab0YpIYT7M6ry8CmTns90ndxQDgovcvLZS3WfIGvpDmvFDbaOhZn+pfJ4fn1RtabX0L/+/3lTE27Xqv5tS71jEML51h3QGpvsn1nQFiAqg6+xiGpuXtFvJTr7bogFMDThu/FeQdWZ8ulapMyzHfzKU2O6f48714cA1wo9Bdh4uVP0TUqo17yNoWN9fRtJfx0"
      ],
      "alg": "RS256"
    }
  ]
}

👀 1

Yorrick Elzinga

09/30/2025, 11:27 AM

I already pasted my jwks in there

Yorrick Elzinga

09/30/2025, 11:27 AM

Or should i do it differently

Alon Boshi

09/30/2025, 11:28 AM

yours is currently:

Copy code

{
  "keys": [
    {
      "e": "AQAB",
      "n": "nRmnPsDK49gtlYhnAq6pN6awGY7AcLyHK52GaHIhAmUiNI3dUpOg6vuMs5ZxPTWq5WD-5lu2KI72hHbV1XauoTMSnyepJXmRgaVCXj00lWbKrUcFfP0V3nF3RyzfDgBc3hY1JNkGVjH8v04slI8juyqhnYqKvHWy9CTzrW5988AZr56XwgnCx45y1TfKXo0hMKuHgvzN4yzXuSu5MlwIIGukw4d8NGby-m1z0aSdioJMBVc0rAQTefp_cDZJ9x5gU93NxxCMbtQUSerp7__1edEU0rqlSfxJr0z5Sjp66Tu6xm7VCFFS2puT3Fdwul-g1kD-asETY0eDHx_f14BdcQ",
      "kid": "key-1",
      "kty": "RSA"
    }
  ]
}

Yorrick Elzinga

09/30/2025, 11:29 AM

image.png

Yorrick Elzinga

09/30/2025, 11:29 AM

Yorrick Elzinga

09/30/2025, 11:29 AM

I should paste your thing

Yorrick Elzinga

09/30/2025, 11:30 AM

Now i should change the kid in my jwt aswell right\

Yorrick Elzinga

09/30/2025, 11:36 AM

I tried a jwt with both kid's but neiter of them work

Yorrick Elzinga

09/30/2025, 11:37 AM

is my jwt correcT? eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjRCOTVad3k3YW5sZ0d2YmZQUlVGZiJ9.eyJzdWIiOiJ5b3JyaWNrcmJAZ21haWwuY29tIiwidXNlcl9pZCI6IjhjZjFlYzE4LTE3MmYtNGZkNS04MmU1LWQ0YjNhYzdmYzZhZSIsImh0dHBzOi8vcGVybWl0LmlvL3RlbmFudCI6ImRlZmF1bHQiLCJodHRwczovL3Blcm1pdC5pby9lbnYiOiI0ZTllYjA2N2RkMTE0ZjUxOTUwODg2YTgyM2M3NmM0YiIsImlzcyI6Imh0dHBzOi8vZGVmYXVsdC5wZXJtaXQuaW8iLCJhdWQiOlsiaHR0cHM6Ly9kZWZhdWx0LnBlcm1pdC5pbyJdLCJpYXQiOjE3NTkyMzIxMDAsImV4cCI6MTc1OTIzNTcwMH0.TLOfdAhcO_4WepvdOsOt095bSeCnJligQBeAYsFLAp13RcrgWVrWOzys7MIA_gPExpfzVeLbLwCxKql5CQYhcigt-QQSKNhjwlnbaX3DSiBFr17s29gkDChQaOw3Onj97MjHpp8dr1SYdNpenAfnFY6cH5nKo0J9bg2Dwxg4h7D0jJrm4wHvngNYFGK4bo9dsjWpcUH3p6Rmi3B7qE9vF3WS3iJBAz1Lh2LN5ZhiaNQ0Aq2h7PpxM9Hz2wgKze-J1Pf3bkRHhrZvavIBmc7T1rAJjCPU6UgHc2Kf-bZE0XE2RHj2ZFxxa1lyt7Mg_QPjwe-CyPF4gqCSdcMj-wQqCA

Alon Boshi

09/30/2025, 11:39 AM

yes - do you get "user not found"?

Yorrick Elzinga

09/30/2025, 11:41 AM

response is

Copy code

{
  "id": "cd412e3876f74c819dff54cef4d2e8a7",
  "title": "The request was invalid",
  "error_code": "INVALID_INPUT",
  "message": "We are sorry for the inconvenience, The JWT token could not be decoded, JWT ends with:QqCA. Please check the JWT token and try again.\nIf the issue keeps happening, contact our support on Slack for further guidance."
}

Yorrick Elzinga

09/30/2025, 11:41 AM

Looks same to me

Yorrick Elzinga

09/30/2025, 11:41 AM

Only jwt end is different cause i changed it because of the new jwks kid

Alon Boshi

09/30/2025, 11:51 AM

is it look ok at jwt.io?

Alon Boshi

09/30/2025, 11:51 AM

try with your jwks also

Yorrick Elzinga

09/30/2025, 12:03 PM

Dont think so

Yorrick Elzinga

09/30/2025, 12:04 PM

But im using a private.pem to make my jwt

Yorrick Elzinga

09/30/2025, 12:04 PM

But i dont know how u generated this jwk

Yorrick Elzinga

09/30/2025, 12:04 PM

cause it are 2

Alon Boshi

09/30/2025, 12:27 PM

the issue is with the jwt and jwks you put. can i create an environment in your workspace to test it myself?

Yorrick Elzinga

09/30/2025, 12:28 PM

Yeah sure

Alon Boshi

09/30/2025, 12:31 PM

thanks

Yorrick Elzinga

09/30/2025, 12:32 PM

JWKS:

Copy code

{
  "keys": [
    {
      "e": "AQAB",
      "n": "whtkYG3N8cFdj9NURXrGYnIlutaywFi_YYoQZdiU1yylG_qa0cI1m7hkbWAN2E2SevE2qXcyfJYaquckRiXEQgfL9VF4SDzzs5Zz6OlseVWjBBVXWEHm64TmBhr1zW7d8aB27dp4RcwWfrRUQ3onj4hA2Pp7Yo6wmkobRTMJEKe462DWWMT5Ta_AtTI1qONvOWe3iI_3rgiJ8VjuZvpPtsMtnWxLX_6vEqliwIw-RN6wmruQz1VGY-z1Bej5lVIwNRivqVxfXDviJXlGpxG-AqLOgpe1Ml4tlaCn7ciHlgR4CYKR72bKaJ9c--WLZyrVDtNJmwKm2JDZQkPNFXH7Sw",
      "alg": "RS256",
      "kid": "GoThkFRLnESuNS37R6vKM",
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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"
      ],
      "x5t": "gsVSPfe5kAUlgnQiO6wNX78I5IA"
    },
    {
      "e": "AQAB",
      "n": "2sOuaIKjrYJw4yAcnVjeDEcEZjzQTUlg8s2_vx6rq-L3UCPoEc1s_kHBpqw0ZyNcplngtlqVC9vYtL51oGI3I1EX6WzMzWQGShXfVNxzW2HlQSpRUwCXZKaVH4K9bhE7MXnuIjQRhrNAOxP3ot_u-JuXCAbjcZHitESAzRFIKglhi7m_wecut_Z5XXEKaGlAKTT65-ouw17hZ1v3T9BlDSpaw-o3ckd6tJ9icWV-D2jQlmqnxsH5n5TSekFocc5JqVR6zkS7WHqkE7nbGrDr85VgyZ453Y7LKRphLa-J2WvZ5wSaG15Yidb7ZnTAG88A3aSb9gs_G4Q0_ln1-xFh9Q",
      "alg": "RS256",
      "kid": "4B95Zwy7anlgGvbfPRUFf",
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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"
      ],
      "x5t": "Co4yo_8w0TBa4jYh_8GiJ5oV9eY"
    }
  ]
}

Yorrick Elzinga

09/30/2025, 12:32 PM

Copy code

const loginOptions = {
            loginMethod: LoginMethod.frontendOnly,
            userJwt:
                'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjRCOTVad3k3YW5sZ0d2YmZQUlVGZiJ9.eyJzdWIiOiJ5b3JyaWNrcmJAZ21haWwuY29tIiwidXNlcl9pZCI6IjhjZjFlYzE4LTE3MmYtNGZkNS04MmU1LWQ0YjNhYzdmYzZhZSIsImh0dHBzOi8vcGVybWl0LmlvL3RlbmFudCI6ImRlZmF1bHQiLCJodHRwczovL3Blcm1pdC5pby9lbnYiOiI0ZTllYjA2N2RkMTE0ZjUxOTUwODg2YTgyM2M3NmM0YiIsImlzcyI6Imh0dHBzOi8vZGVmYXVsdC5wZXJtaXQuaW8iLCJhdWQiOlsiaHR0cHM6Ly9kZWZhdWx0LnBlcm1pdC5pbyJdLCJpYXQiOjE3NTkyMzIxMDAsImV4cCI6MTc1OTIzNTcwMH0.TLOfdAhcO_4WepvdOsOt095bSeCnJligQBeAYsFLAp13RcrgWVrWOzys7MIA_gPExpfzVeLbLwCxKql5CQYhcigt-QQSKNhjwlnbaX3DSiBFr17s29gkDChQaOw3Onj97MjHpp8dr1SYdNpenAfnFY6cH5nKo0J9bg2Dwxg4h7D0jJrm4wHvngNYFGK4bo9dsjWpcUH3p6Rmi3B7qE9vF3WS3iJBAz1Lh2LN5ZhiaNQ0Aq2h7PpxM9Hz2wgKze-J1Pf3bkRHhrZvavIBmc7T1rAJjCPU6UgHc2Kf-bZE0XE2RHj2ZFxxa1lyt7Mg_QPjwe-CyPF4gqCSdcMj-wQqCA',
            tenant: 'default',
            envId: '4e9eb067dd114f51950886a823c76c4b',
        };

Alon Boshi

09/30/2025, 12:36 PM

your jwt and jwks are not valid

Alon Boshi

09/30/2025, 12:36 PM

according to jwt.io

Yorrick Elzinga

09/30/2025, 12:36 PM

With my own jwks it was

Yorrick Elzinga

09/30/2025, 12:36 PM

Like i said i dont know how u generated this jwks

Alon Boshi

09/30/2025, 12:44 PM

checked it on our workspace and it worked good, at yours it gets this error, please double check your jwt and jwks. it might be old or not updated

Yorrick Elzinga

09/30/2025, 12:45 PM

But i dont understand it anymore

Yorrick Elzinga

09/30/2025, 12:45 PM

U said i needed to change my jwks

Yorrick Elzinga

09/30/2025, 12:45 PM

message has been deleted

Alon Boshi

09/30/2025, 12:46 PM

i thought it might be helped but its not, you need yours

Alon Boshi

09/30/2025, 12:46 PM

to match your jwt

Yorrick Elzinga

09/30/2025, 12:46 PM

to this

Copy code

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "n": "whtkYG3N8cFdj9NURXrGYnIlutaywFi_YYoQZdiU1yylG_qa0cI1m7hkbWAN2E2SevE2qXcyfJYaquckRiXEQgfL9VF4SDzzs5Zz6OlseVWjBBVXWEHm64TmBhr1zW7d8aB27dp4RcwWfrRUQ3onj4hA2Pp7Yo6wmkobRTMJEKe462DWWMT5Ta_AtTI1qONvOWe3iI_3rgiJ8VjuZvpPtsMtnWxLX_6vEqliwIw-RN6wmruQz1VGY-z1Bej5lVIwNRivqVxfXDviJXlGpxG-AqLOgpe1Ml4tlaCn7ciHlgR4CYKR72bKaJ9c--WLZyrVDtNJmwKm2JDZQkPNFXH7Sw",
      "e": "AQAB",
      "kid": "GoThkFRLnESuNS37R6vKM",
      "x5t": "gsVSPfe5kAUlgnQiO6wNX78I5IA",
      "x5c": [
        "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"
      ],
      "alg": "RS256"
    },
    {
      "kty": "RSA",
      "use": "sig",
      "n": "2sOuaIKjrYJw4yAcnVjeDEcEZjzQTUlg8s2_vx6rq-L3UCPoEc1s_kHBpqw0ZyNcplngtlqVC9vYtL51oGI3I1EX6WzMzWQGShXfVNxzW2HlQSpRUwCXZKaVH4K9bhE7MXnuIjQRhrNAOxP3ot_u-JuXCAbjcZHitESAzRFIKglhi7m_wecut_Z5XXEKaGlAKTT65-ouw17hZ1v3T9BlDSpaw-o3ckd6tJ9icWV-D2jQlmqnxsH5n5TSekFocc5JqVR6zkS7WHqkE7nbGrDr85VgyZ453Y7LKRphLa-J2WvZ5wSaG15Yidb7ZnTAG88A3aSb9gs_G4Q0_ln1-xFh9Q",
      "e": "AQAB",
      "kid": "4B95Zwy7anlgGvbfPRUFf",
      "x5t": "Co4yo_8w0TBa4jYh_8GiJ5oV9eY",
      "x5c": [
        "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"
      ],
      "alg": "RS256"
    }
  ]
}

Alon Boshi

09/30/2025, 12:46 PM

forget about it

Yorrick Elzinga

09/30/2025, 12:46 PM

Yorrick Elzinga

09/30/2025, 12:47 PM

To make a jwk i need my pem key right

Alon Boshi

09/30/2025, 12:51 PM

yes

Yorrick Elzinga

09/30/2025, 12:52 PM

i generated it at https://jwkset.com/generate

Yorrick Elzinga

09/30/2025, 12:52 PM

Copy code

{
  "kty": "RSA",
  "alg": "RS256",
  "kid": "09937378-fb8b-4c23-b418-e68d942ffec5",
  "n": "nRmnPsDK49gtlYhnAq6pN6awGY7AcLyHK52GaHIhAmUiNI3dUpOg6vuMs5ZxPTWq5WD-5lu2KI72hHbV1XauoTMSnyepJXmRgaVCXj00lWbKrUcFfP0V3nF3RyzfDgBc3hY1JNkGVjH8v04slI8juyqhnYqKvHWy9CTzrW5988AZr56XwgnCx45y1TfKXo0hMKuHgvzN4yzXuSu5MlwIIGukw4d8NGby-m1z0aSdioJMBVc0rAQTefp_cDZJ9x5gU93NxxCMbtQUSerp7__1edEU0rqlSfxJr0z5Sjp66Tu6xm7VCFFS2puT3Fdwul-g1kD-asETY0eDHx_f14BdcQ",
  "e": "AQAB"
}

Yorrick Elzinga

09/30/2025, 12:53 PM

with this jwt: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjA5OTM3Mzc4LWZiOGItNGMyMy1iNDE4LWU2OGQ5NDJmZmVjNSJ9.eyJzdWIiOiJ5b3JyaWNrcmJAZ21haWwuY29tIiwidXNlcl9pZCI6IjhjZjFlYzE4LTE3MmYtNGZkNS04MmU1LWQ0YjNhYzdmYzZhZSIsImh0dHBzOi8vcGVybWl0LmlvL3RlbmFudCI6ImRlZmF1bHQiLCJodHRwczovL3Blcm1pdC5pby9lbnYiOiI0ZTllYjA2N2RkMTE0ZjUxOTUwODg2YTgyM2M3NmM0YiIsImlzcyI6Imh0dHBzOi8vZGVmYXVsdC5wZXJtaXQuaW8iLCJhdWQiOlsiaHR0cHM6Ly9kZWZhdWx0LnBlcm1pdC5pbyJdLCJpYXQiOjE3NTkyMzY3NjcsImV4cCI6MTc1OTI0MDM2N30.aHfkZ8rDTFnSnRHoV8K4hLSXuK5Xgp25uOw9DBJ86pd4kjEEQ0SHFVaQh-8j5Grr-pZ8mJq7HVrS7miacxAaWbabLflwolSbxznvQzrSAhUrPfRSjPGUNC7fY91BLJzHGqw50Zd6crEzdaCsTRScYMxM5OLRc37fy1QiAlr_zV5nBCA6prTrZBteOsnATJxoSbPHE8wRUWYaWPKteBKT5zKHInDkBgSGv7stLFLpjb8FT-A70l0JPfRLCpLZJnQIIWJuRRB72FqG8teHgUcT6UG5I8XCgYcLTEhKJF4ftWwix1PEoYcoIKkt2USdEmcdi3PT83hIGPGlBWxTaOKP-w

Yorrick Elzinga

09/30/2025, 12:54 PM

image.png

Yorrick Elzinga

09/30/2025, 12:54 PM

still got issue

Yorrick Elzinga

09/30/2025, 12:56 PM

nextjs-dev | GET /_next/static/src/sendToken.ts 404 in 334ms nextjs-dev | GET /_next/static/src/elements.ts 404 in 345ms nextjs-dev | GET /_next/static/src/proxy.ts 404 in 359ms nextjs-dev | GET /_next/static/src/index.ts 404 in 517ms nextjs-dev | GET /_next/static/runtime.ts 404 in 147ms

Thomas

09/30/2025, 1:27 PM

Hey @Yorrick Elzinga, since you have Raz's example working and @Alon Boshi just set this up in his env and got it working, I think this is a matter of debugging on your end and not something you need Permit support for.

Alon Boshi

09/30/2025, 1:28 PM

https://docs.permit.io/embeddable-uis/element-login/#use-the-login-method maybe consider using this method of login

Yorrick Elzinga

09/30/2025, 1:29 PM

@Alon Boshi in what project u made it work for you?

Alon Boshi

09/30/2025, 1:31 PM

on mine, build a new one to try it, the issue has to be in your jwt or jwks. not on Permit's side

Yorrick Elzinga

09/30/2025, 1:32 PM

in a next js app?

Alon Boshi

09/30/2025, 1:34 PM

exactly like the example

Yorrick Elzinga

09/30/2025, 1:34 PM

example as in the demo app?

Alon Boshi

09/30/2025, 1:34 PM

yes

Yorrick Elzinga

09/30/2025, 1:35 PM

what is the jwt u used

Yorrick Elzinga

09/30/2025, 1:56 PM

I am running the demo project now

Yorrick Elzinga

09/30/2025, 1:56 PM

When i change the jwks and private key

Yorrick Elzinga

09/30/2025, 1:59 PM

I am already getting a 400 error

Copy code

35c80cdb4bd4993abc5735ab72e3", title: "The request was invalid", error_code: "INVALID_INPUT",…}
error_code
: 
"INVALID_INPUT"
id
: 
"f70e35c80cdb4bd4993abc5735ab72e3"
message
: 
"We are sorry for the inconvenience, The JWT token could not be decoded, JWT ends with:kW6w. Please check the JWT token and try again.\nIf the issue keeps happening, contact our support on Slack for further guidance."
title
: 
"The request was invalid"

Yorrick Elzinga

09/30/2025, 2:00 PM

Maybe i should make a new private and public key and start from the beginning

Yorrick Elzinga

09/30/2025, 2:01 PM

How do you guys make keys

Thomas

09/30/2025, 3:07 PM

https://tkirk.auth0.com/.well-known/jwks.json

Thomas

09/30/2025, 3:07 PM

you can use an IdP like Auth0. or something like https://mkjwk.org/

Yorrick Elzinga

09/30/2025, 4:56 PM

Do i need private and public jwk in permit or just the public

Thomas

09/30/2025, 5:08 PM

the public. private is used to create the JWT

Thomas

09/30/2025, 5:09 PM

and then the public key is used to verify the signature that the private key signed with

Yorrick Elzinga

09/30/2025, 5:22 PM

I am sorry but i cant manage to get it working. Could some one run throuh with me setting up those key stuff, I know how to generate them but even when i generate new keys, jwk and using the demo app i cant get it to work

Yorrick Elzinga

09/30/2025, 8:36 PM

I am burning quite a lot of time on this topic. Feels like a small thing i am messing up but i cant figure it out. I am willing to use another login method but when i am looking into that its not very clear for me how i should setup my backend in other words what is needed for that. I read through the documentation but like i said its not clear for me what i have to setup.

Or Weis

09/30/2025, 8:51 PM

Hi Yorrick, Thank you so much for the time and effort you’ve put into this so far — we truly appreciate your engagement. After a thorough review, we haven’t been able to identify any issues with the product itself, and we haven’t received similar reports from other customers. At this stage, any next steps may involve approaches that are more related to implementation or training rather than product troubleshooting. While we do our best to support users wherever possible, our support team’s primary focus is on resolving product-related issues. Given the time both you and our team have already invested, we now need to redirect our resources to other active cases. We fully understand if this experience has been frustrating and respect whatever decision you make regarding your continued use of our product. Please know that your feedback is important to us, and we’ll keep it in mind as we improve our services.

Yorrick Elzinga

09/30/2025, 9:04 PM

Where should i get help related tot implementation or training?

Or Weis

09/30/2025, 9:10 PM

Each software developer’s journey is unique, as we don’t know you well enough I’d be hard pressed to suggest a path. We do not provide training or implementation guidance as part of our Community, Startup, or Pro tiers; Enterprise tier customers can acquire professional services which can be used for such goals.

Yorrick Elzinga

09/30/2025, 9:44 PM

All right i understand. Would it be possible to share the working variant using my environment and keys. Maybe when i have that i could manage to find the solution. @Alon Boshi do you possibly still have that?

Or Weis

09/30/2025, 9:45 PM

Alon is OOO at the moment (it’s almost 1am for him) - I believe he’ll be able to reply tomorrow

Yorrick Elzinga

09/30/2025, 9:46 PM

Yeah no worries, bed time for me aswell

Alon Boshi

10/01/2025, 9:13 AM

Hey @Yorrick Elzinga, Have you tried to do this process using login cookie ?

Yorrick Elzinga

10/01/2025, 9:48 AM

No i have not tried that, i was curious what private and public key you used and jwk for making it work

Yorrick Elzinga

10/01/2025, 9:48 AM

You made it work in https://github.com/permitio/permit-demo-element?tab=readme-ov-file right?

Alon Boshi

10/01/2025, 9:49 AM

will send you in a moment 🙂

Yorrick Elzinga

10/01/2025, 9:49 AM

thnx

Alon Boshi

10/01/2025, 9:52 AM

The JWKS i used is this and the JWT i took from my network tab -> Request Headers -> Authorization (but its temporary of course with short timestamp)

Yorrick Elzinga

10/01/2025, 10:27 AM

Ok thnx, Is there a docs page about how to generate private and public key? I have seen the page about jwks but there is documentation about a manual setup

Yorrick Elzinga

10/01/2025, 10:27 AM

Or is that not supported?

Yorrick Elzinga

10/01/2025, 7:25 PM

Yo, i fixed it using frontend only method. Issue was with the jwt payload

permit support automation2

10/01/2025, 7:26 PM

Hey, thanks for reaching out ! It seems our team is a little busy right now, a human will be with you within the next hour or so. In the meantime, can I help you ?

Yorrick Elzinga

10/01/2025, 7:27 PM

I didnt know the iis and aid claims were supposed to be {tenant}.permit.io urls

Yorrick Elzinga

10/01/2025, 7:29 PM

My feedback would be to put some more info about the jwt token into your documentation and maybe about how to make the keys for jwt signing

Eli Moshkovich

10/01/2025, 7:34 PM

Hi @Yorrick Elzinga Glad you got it working! Thanks for the docs feedback, I’ll pass this along to the right team.

Open in Slack

Previous Next