Hi everyone, I hope you’re all doing well. I’m looking for some clarification regarding Vapi’s JWT token authentication. The documentation seems a bit unclear—some sections reference the HS256 algorithm, while others mention RS256—so I’m not fully sure which one should be used for generating the token. I’ve also run into a couple of issues during implementation: * When I generate the token using HS256, the token is created successfully, but the request to

https://api.vapi.ai/call/web

returns a Forbidden error. * When I generate the token using RS256, the token appears valid (even verified on token.io), but the same Vapi request returns a 401 Unauthorized error. I’ve attached screenshots for reference. If anyone has guidance on which algorithm is correct or insights into what might be causing these errors, I would really appreciate your help. Thank you!