Hi! I have a web-app where I authenticate users with Auth0. This is the only activity in the tennant. I have set up the connection with and Application based on the “Regular Web Application” setup that provides a Client ID and a Client Secret for my web-app to authenticate. Now, I have received …

Hi @Sivesind Your ID token received after a successful login is signed by the signing key. You usually get the verification key via a call to the JWKS endpoint: JSON Web Key Sets This is usually handled by your SDK. So if you rotate the signing key, it should automatically update the verification…

Does a regular web app use the signing keys?

Get Help

konrad.sopala May 24, 2022, 10:04am 3

Thanks for helping on this one John!

Topic		Replies	Views
Regular rotation of Signing keys JWT.io	5	3887	October 17, 2020
Caching JWKS signing key JWT.io jwks	5	25331	September 4, 2019
Question re: Client Credentials Get Help jwt , auth0 , client-credentials	3	3804	August 26, 2019
Confusion about the JWKS Get Help	6	2716	February 24, 2022
Implications of signing key rotation Get Help	2	2829	April 9, 2022

Does a regular web app use the signing keys?

Related topics