Implications of signing key rotation

[dsebastiampillai]

Hi everyone,

I have received an email from Auth0 asking to initiate a rotation of the key.

I understand the process however I am not entirely sure of the implications. Would you be able to help me understand if
• There will be any changes to our already set up users
• There is any specific change I need to make to the users to ensure they are shifted to the new key
• Or is this just going to be a backend shift?

Just want to make sure I understand the implications before revoking the previous key!

Thanks for your help on this.

[tyf]

Hi there @dsebastiampillai welcome to the community!

Please check out this article which has a section on the impact signing key rotation. Regarding users in particular, you may also want to take a look at this FAQ post which goes into potential implications to users (issued tokens) when rotating signing keys.

Hope this helps!