I am fresh man, and reviewing docs step by step. Signing Algorithms [image]

Hey @anlexN welcome to the community! When the private key is rotated, only the linked public keys will work to validate any subsequently minted tokens. To answer your question, no a pre-existing public key cannot validate any JWT created using the new private key. The statement you’ve pointed out …

With RS256, if the private key is rotated, can old pubic key validate the JWT signature?

Help

anlexN August 17, 2023, 12:38pm 4

@tyf
thank you very much, teacher! can you also answer my another question?

Topic		Replies	Views
Verifying RS256 token using downloaded certificate Help token , jwks , rs256 , certificate	8	4934	March 2, 2018
Verify RS256-signed JWT tokens Help oauth-2-0 , protocols	2	1542	March 29, 2023
Where is the Auth0 public key to be used in jwt.io to verify the signature of a RS256 token? Help auth0 , certificate , jwtio , rsa	6	40392	September 15, 2022
Unable to validate RSA256 access token Help rsa256 , verify-token	2	5009	March 2, 2018
How to forge an RS256 token with the Signing Key Help test , other	4	6008	June 9, 2023

With RS256, if the private key is rotated, can old pubic key validate the JWT signature?

Related topics