diff --git a/Gemfile.lock b/Gemfile.lock
index 47100a4..8768e21 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -2,7 +2,7 @@ PATH
   remote: .
   specs:
     omniauth-auth0 (3.2.0)
-      jwt (~> 2)
+      jwt (>= 2, < 4)
       omniauth (~> 2)
       omniauth-oauth2 (~> 1)
 
@@ -55,7 +55,7 @@ GEM
       logger
     io-console (0.8.2)
     json (2.19.5)
-    jwt (2.10.2)
+    jwt (2.10.3)
       base64
     language_server-protocol (3.17.0.5)
     lint_roller (1.1.0)
diff --git a/omniauth-auth0.gemspec b/omniauth-auth0.gemspec
index f4fc6fb..ebc811a 100644
--- a/omniauth-auth0.gemspec
+++ b/omniauth-auth0.gemspec
@@ -21,7 +21,7 @@ omniauth-auth0 is the OmniAuth strategy for Auth0.
   s.executables   = `git ls-files -- bin/*`.split('\n').map{ |f| File.basename(f) }
   s.require_paths = ['lib']
 
-  s.add_runtime_dependency 'jwt', '~> 2'
+  s.add_runtime_dependency 'jwt', '>= 2', '< 4'
   s.add_runtime_dependency 'omniauth', '~> 2'
   s.add_runtime_dependency 'omniauth-oauth2', '~> 1'