paste the token to <jwt.io> to see if it is HS256 ...
# random
n
paste the token to jwt.io to see if it is HS256 or RS256.