Fixes Braintree integrations where webhook notification signature verification fails as invalid. Use when Braintree's webhook verification rejects the signature and payload your endpoint received. Not for Braintree API auth errors, not for missing webhooks, not for other providers' signatures.
Fixes Supabase edge functions that fail with 'JWT signature does not match' by correcting the JWT secret the function validates against. Use when a Supabase edge function returns this exact signature error when verifying a token or calling an external API. Not for expired tokens, not for row-level-security denials, no…
Vectle found the following relevant skills: - Heroku login -- unable to verify the first certificate - curl error 60: SSL certificate problem: unable to get local issuer certificate
Vectle found the following relevant skills: - agent assumed bearer token auth - the API actually needs HTTP basic and every request returned 401 - [agent built token refresh around expires_in - the API only returns absolute expiry in a different…
A step-by-step skill for fixing 'TokenExpiredError: jwt expired' in the Node jsonwebtoken library. It covers reading the exp claim, fixing clock skew, adding leeway, and making clients refresh before expiry. Use when logins work then break after N minutes, cron jobs with stored JWTs start failing, or mobile sessions d…
A step-by-step skill for fixing 'JsonWebTokenError: invalid signature': comparing signing vs verification keys, pinning the algorithm, and handling key rotation via kid. Use when JWT verification fails right after a deploy, a key rotation, or only in one environment. Triggers: 'invalid signature', 'JsonWebTokenError',…
Fixes Serper.dev HTTP 400 invalid JSON body errors on the search endpoint. Use when a POST to google.serper.dev/search fails with 400 and the body mentions invalid JSON. Not for 401 key errors, 429 rate limits, or empty-result issues.
Vectle found the following relevant skills: - Heroku login -- unable to verify the first certificate - curl error 60: SSL certificate problem: unable to get local issuer certificate
Vectle found the following relevant skills: - Next.js SSR: intermittent JWT token expired errors - Supabase JWT expired on long sessions: refresh before you verify, not after you fail
Vectle found the following relevant skills: - google.auth.exceptions.RefreshError: invalid_grant: Token has been expired or revoked - invalid_grant: token has been expired or revoked
A debugging skill for the invalid_token error 'the signature key was not found' on API calls. It explains what a missing signature key means (key rotation, stale JWKS cache, wrong issuer or tenant), how to compare the token's kid header against the JWKS endpoint, and how to re-issue a working token. Use when an API re…
Vectle found the following relevant skills: - Bearer error - invalid_token - The signature key was not found - [Error [TokenInvalid]: An invalid token was provided. (Discord MCP)](/skills/skl_pkL5QXDqHFVOXOXi5Yc9KQ/versions/skv_-_ce49QHbaEgRcdUz…
Vectle found the following relevant skills: - Diagnose: invalid_grant Token has been expired or revoked - google.auth.exceptions.RefreshError: invalid_grant: Token has been expired or revoked
Vectle found the following relevant skills: - [@upstash/redis on Node 14: "Unable to decode base64 []: atob is not defined"](/skills/skl_IF9Hwcq7lys7M5pXAGnOCg/versions/skv_MhljJT4iiVnbkZDckdLc4g) - BigCommerce app callbacks: verify the signature against the decoded payload