title: Verifying Auth0 JWT throws invalid algorigthm
body: <p>I have created an Auth0 client, I am logging in and receive this token:</p>
  
  <pre><code>eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik1rVkdOa1l5T1VaQ1JqTkRSVE5EUmtNeU5rVkROMEUyUTBVMFJrVXdPVEZEUkVVNU5UQXpOZyJ9.eyJpc3MiOiJodHRwczovL3RvdGFsY29tbW56LmF1LmF1dGgwLmNvbS8iLCJzdWIiOiJnb29nbGUtb2F1dGgyfDEwMzI5NzA4OTYyMTk5NjUwMjY2MiIsImF1ZCI6ImxTWUtXMUZZdENkMWJLQmdXRWN0MWpCbmtDU3R2dW5SIiwiaWF0IjoxNTA5ODYyMTI1LCJleHAiOjE1MTAyMjIxMjV9.kjmckPxLJ4H9R11XiBBxSNZEvQFVEIgAY_jj2LBy4sEJozBB8ujGE7sq9vEIjMms-Lv2q9WzFQPrqcxyBcYC4Je4QojMgvqLDCodtpot0QUle8QfGmonc1vZYIZyX-wqyOXtRqhoZVEKTeLhm9Le2CV4_a3BwgjkE1LjcDx01GZfsnaId8mh10kGk-DBmr5aVc8MxglLCq5Uk8Zbl2vDc__UMDgx1eQPQg-zve4fUf8zHcxizypYTnF_v0dEAT00L2j5J41SFYdWvP6ReQ3vhVYew2o9iM6u1s75HE-xW8s4pzV4BZAQtgfgIeCd6aVGZs76bcnQXBLej1B7zaPBvA
  </code></pre>
  
  <p>What I am trying to do now is to verify the token using <a href="https://github.com/auth0/node-jsonwebtoken" rel="noreferrer">jsonwebtoken</a>. The token is signed with an <em>RS256</em> algorithm.</p>
  
  <p>I downloaded the signing certificate as a <code>.pem</code> and I am <strong>successfully</strong> using it to verify the token like this:</p>
  
  <pre><code>var cert = fs.readFileSync('certificate.pem');
  jwt.verify(token, cert, {algorithm: 'RS256'}, (err, decoded) =&gt; {
    console.log(err)
    console.log(decoded)
  });
  </code></pre>
  
  <p>What I want to do and it doesn't work is verifying the token using the secret (which is called <em>Client Secret</em> in the Auth0 client settings and is a string).</p>
  
  <pre><code>jwt.verify(token, MYSECRET, {algorithm: 'RS256'}, (err, decoded) =&gt; {
    console.log(err)
    console.log(decoded)
  });
  </code></pre>
  
  <p>This code always throws an error:</p>
  
  <pre><code>{ JsonWebTokenError: invalid algorithm
      at Object.module.exports [as verify] (C:\code\aws\learn-authorizer\node_modules\jsonwebtoken\verify.js:90:17)
      at Object.&lt;anonymous&gt; (C:\code\aws\learn-authorizer\testme.js:25:5)
      at Module._compile (module.js:624:30)
      at Object.Module._extensions..js (module.js:635:10)
      at Module.load (module.js:545:32)
      at tryModuleLoad (module.js:508:12)
      at Function.Module._load (module.js:500:3)
      at Function.Module.runMain (module.js:665:10)
      at startup (bootstrap_node.js:187:16)
      at bootstrap_node.js:608:3 name: 'JsonWebTokenError', message: 'invalid algorithm' }
  </code></pre>
  
  <p>My question is: how can I verify the RS256 token using the secret key as opposed to using the certificate file? (I also tried creating a new client which is using the HS256 algorithm, but I get the same error).</p>