Ah thank you. its RS256, even though my auth0 client is setup to sign with HS256. Will chase up Auth0 and see what's happening