How do I fix an invalid token?

There are two ways to fix the error:

1. (RECOMMENDED) Change the application signature algorithm to RS256 instead of HS256.
2. Change the value of your responseType parameter to token id_token (instead of the default), so that you receive an access token in the response.