Could you check the algorithm of your token on jwt.io? If it's RS256, then you need to change it to HS256.