# Pomerium Auth0/GitHub IdP Grafana JWT does not work

**URL:** https://discuss.pomerium.com/t/pomerium-auth0-github-idp-grafana-jwt-does-not-work/56
**Category:** Support
**Tags:** k8s
**Created:** [January 5, 2022, 7:03am UTC](https://discuss.pomerium.com/t/pomerium-auth0-github-idp-grafana-jwt-does-not-work/56 "2022-01-05T07:03:44Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![ram](https://avatars.discourse-cdn.com/v4/letter/r/b9bd4f/32.png) [@ram](https://discuss.pomerium.com/u/ram)
#### Post date: [January 5, 2022, 7:03am UTC](https://discuss.pomerium.com/t/pomerium-auth0-github-idp-grafana-jwt-does-not-work/56/1 "2022-01-05T07:03:44Z")

</div>

Running the latest version of Pomerium and Grafana (Community stack), Auth0 or GitHub are tested IdP. Grafana is setup to use JWT.

## What happened?

Post authentication on the IdP portal, redirection to grafana is not working as expected. Below error is thrown,

{  
“message”: “invalid API key”  
}

## What did you expect to happen?

Post auth it should redirect to Grafana Page

## What’s your environment like?

- Pomerium version (retrieve with `pomerium --version`): latest (helm installer)
- Server Operating System/Architecture/Cloud: Ubuntu 20.04, K3s, traefik ingress

## What’s your config.yaml?

```auto
routes:
    - from: https://grafana.qehnelo.xyz
      to: http://main-grafana.prometheus
      policy:
        - allow:
            or:
              - domain:
                  is: gmail.com
      tls_skip_verify: true 

ingress:
  annotations:
    kubernetes.io/ingress.class: "traefik"
    cert-manager.io/cluster-issuer: letsencrypt-stg
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
    # ingress.pomerium.io/pass_identity_headers: "true"
  secretName: le-wc-qehnelo.xyz

```

## What did you see in the logs?

```logs
message": "invalid API key"

```

## Additional context

Tried both the Git and auth0 IdP and looks same. tried different version and problem seems same

---

<div class="post-metadata">

### Author: ![denis](https://avatars.discourse-cdn.com/v4/letter/d/5e9695/32.png) [@denis](https://discuss.pomerium.com/u/denis)
#### Post date: [January 5, 2022, 8:02pm UTC](https://discuss.pomerium.com/t/pomerium-auth0-github-idp-grafana-jwt-does-not-work/56/2 "2022-01-05T20:02:46Z")

</div>

`invalid API key` is not Pomerium error message.

Also, I notice you’re using forward-auth configuration with Ingress managed by Traefik.  
Pomerium provides a first class Ingress controller [Ingress Controller | Pomerium](https://www.pomerium.com/docs/k8s/ingress.html)