title: How do you test out Hasura authorization?
body: <p>If I disable <code>x-hasura-admin-secret</code> in the Dashboard, and add <code>Authorization: Bearer a_jwt_encoded_with_a_HASURA_GRAPHQL_JWT_SECRET_and_the_hasura_custom_claims</code></p>
  <p>Then I keep getting these toast notifications:</p>
  <pre><code>Schema introspection query failed
  x-hasura-admin-secret/x-hasura-access-key required, but not found
  </code></pre>
  <p>What am I missing? How can I test my permissions and such from within the Hasura GraphiQL explorer?</p>
  <hr />
  <p>My <code>HASURA_GRAPHQL_JWT_SECRET</code> might be in the wrong place. I set it in Heroku (per how you used to have to do it).</p>
  <hr />
  <p>I've updated the <code>HASURA_GRAPHQL_JWT_SECRET</code> to be defined in the Hasura project console's env vars, and have updated it to</p>
  <pre><code>{
      &quot;key&quot;: &quot;01234567890123456789012345678912&quot;,
      &quot;type&quot;: &quot;HS256&quot;
  }
  </code></pre>
  <p>But when I generate a JWT from that config and try it, it throws the same toast notifications...</p>