# OIDC external JWT auth

**URL:** <https://openziti.discourse.group/t/oidc-external-jwt-auth/5438>\
**Category:** Ziti Overlay\
**Created:** [December 17, 2025, 1:59pm UTC](https://openziti.discourse.group/t/oidc-external-jwt-auth/5438 "2025-12-17T13:59:24Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [December 27, 2025, 1:09pm UTC](https://openziti.discourse.group/t/oidc-external-jwt-auth/5438/11 "2025-12-27T13:09:13Z")

</div>

I looked through the code again to check and this error can also occur if you don't have a JWT submitted for authentication as well.

What version of which tunneler is this?

I think it would be useful to try using the ziti ops verify ext-jwt-signer like I showed in this post? [Problem with importing network.jwt or using the URL method - #2 by TheLumberjack](https://openziti.discourse.group/t/problem-with-importing-network-jwt-or-using-the-url-method/5420/2)

Let's make sure you can authenticate using the ziti CLI first and then let's try to diagnose the tunneler issue. This ziti CLI command will hopefully prove that your signer is setup and your controller so that we can leave the tunneler out of this equation for now.

Once you can verify the ext-jwt-signer with the cli, let's try to diagnose the tunneler (if necessary).

---

_[View the full topic](https://openziti.discourse.group/t/oidc-external-jwt-auth/5438)._