JWT Token Encryption

sandeep.k · January 31, 2023, 4:32pm

Hi, i want to encrypt the jwt access token, is there any way i can achieve using Rules or Actions?.

lihua.zhang · January 31, 2023, 10:46pm

Welcome to the Auth0 Community!

As of the current design, we can not encrypt the jwt access token with Action or Rule. May I know why you want to encrypt the jwt access token?

Thanks!

sandeep.k · February 1, 2023, 5:27am

Thanks for the reply @lihua.zhang, it was ask from business end to encrypt as they don’t want access token to be tampered. Is there any other option can be looked at?.

lpapadakos · February 1, 2023, 10:22am

My case is similar to @sandeep.k . Does Auth0 have or recommend a way to have the JWT token encrypted?

sandeep.k · February 2, 2023, 12:54pm

Any suggestions here?

mikejs78 · March 7, 2024, 2:21pm

If it’s tampering you’re worried about, I don’t think that’s an issue even without encryption. JWTs are signed, so any tampering would invalidate the signature and make it an invalid token.