Can I automatically rotate my JWT signing keys?

dan · 29 May 2020, 18:54

Can I automatically rotate the keys that are used to sign my JWT?

dan · 29 May 2020, 19:10

There's no built in key rotation feature. If you think that'd be valuable, please open an GitHub issue outlining the use case.

You can use the keys api: https://fusionauth.io/docs/v1/tech/apis/keys to create a new key. You can then use either the application or tenant APIs to update the signing key. Update the value of the ....jwtConfiguration.accessTokenKeyId key.

dan · 2 Sept 2021, 02:58

The team wrote a tutorial outlining how to rotate keys, including signing keys: https://fusionauth.io/docs/v1/tech/tutorials/key-rotation/