Anyone else getting "invalid JWT / invalid kid" error when adding users from the Auth dashboard?
Hey everyone,
I've been trying to add new users to my project's Auth section directly from the Supabase dashboard, but I keep getting errors.
When I try to create a user directly (with auto-confirm on), I get this:
Failed to create user: invalid JWT: unable to parse or verify signature, token is unverifiable: error while executing keyfunc: invalid kid: w68azCYPZOFkNULP
And when I try to send an invitation link, I get a very similar JWT error:
Failed to invite user: Failed to make POST request to "https://pdpq.......xe.supabase.co/auth/v1/invite". Check your project's Auth logs for more information. Error message: invalid JWT: unable to parse or verify signature, token is unverifiable: error while executing keyfunc: invalid kid: w68azCYPZOFkNULP
The common theme is the invalid JWT and invalid kid error. This just started happening today.
Is anyone else experiencing this? Trying to figure out if it's a platform-wide issue or something specific to my project.
Thanks!
9 Replies
It is not platform wide issue as you are the only report in 9minutes here or Github.
Have you done anything with the new API keys?
Did you do a reddit post a 30 minutes ago?
Also looking closer there was a user hours ago that got something similar and resolved.... https://discord.com/channels/839993398554656828/1390263726514507930/1390312251134705704
Yes
No
Submit a support request.
I'm going to bump this as there are now two of you today with this same keyfunc thing. I don't know if that is an AI you both are using or adding something to the auth signup process or something not in the auth repository but used by them... but odd.
In the morning I saw a banner that mentioned there were problems with some services, I imagine it has something to do with that.
Not that I know of.
There was a storage issue in US east.
Yes, it does seem strange to me, because I'm performing the action from the Supabase dashboard itself.
This might be unrelated, but a few moments ago I also experienced the following bug when trying to reset my password:
When I request a password reset and click the link in the email, I am immediately redirected to the main login page (https://supabase.com/dashboard/sign-in?returnTo=%2Freset-password). It seems the system requires an active session to reset a password, which is not logical since I have forgotten it. I confirmed this behavior by logging in with my old password (which I later remembered). Once I was logged in, the password reset link worked correctly and loaded the form, allowing me to set a new password.
I have already submitted an issue for this through the dashboard.
Not going to dig into that one tonight. you should generate a separate topic on that if you want other users' opinions.
I have bumped this and the other post to my Slack contact with Supabase. But still submit a ticket so they have your info. If you can post ticket # here if they come a looking.
I have bumped this and the other post to my Slack contact with Supabase. But still submit a ticket so they have your info. If you can post ticket # here if they come a looking.
Ticket ID #SU-221257 for "Unable to Reset Password - Reset Link Requires Login"
Ticket ID #SU-221268 for "[Bug] Auth: 'invalid JWT / invalid kid' error when creating or inviting users from the dashboard"
GitHub
Upcoming changes to Supabase API Keys · supabase · Discussion #29260
Timestamp Latest Update 17th June 2025 Early access to new API keys launched, available on all projects. Please give them a try and raise any issues in this discussion for the team to fix or addres...