I am fresh man, and reviewing docs step by step. Signing Algorithms [image]

Hey @anlexN welcome to the community! When the private key is rotated, only the linked public keys will work to validate any subsequently minted tokens. To answer your question, no a pre-existing public key cannot validate any JWT created using the new private key. The statement you’ve pointed out …

With RS256, if the private key is rotated, can old pubic key validate the JWT signature?

Get Help

anlexN August 17, 2023, 12:38pm 4

@tyf
thank you very much, teacher! can you also answer my another question?

Topic		Replies	Views
Where is the Auth0 public key to be used in jwt.io to verify the signature of a RS256 token? Archived auth0 , certificate , jwtio , rsa	5	43087	September 15, 2022
Will public key from JWKS go invalid Archived jwks , jwt-validation , python	3	6679	August 14, 2018
Unable to validate RSA256 access token Archived rsa256 , verify-token	1	5094	December 11, 2017
Verify RS256-signed JWT tokens Get Help oauth-2-0 , protocols	1	1905	March 29, 2023
Why do I need a private key to verify a JWT? JWT.io jwt , rs256	4	4052	March 18, 2024

With RS256, if the private key is rotated, can old pubic key validate the JWT signature?

Related topics