I am fresh man, and reviewing docs step by step. Signing Algorithms [image]

Hey @anlexN welcome to the community! When the private key is rotated, only the linked public keys will work to validate any subsequently minted tokens. To answer your question, no a pre-existing public key cannot validate any JWT created using the new private key. The statement you’ve pointed out …

With RS256, if the private key is rotated, can old pubic key validate the JWT signature?

Get Help

anlexN August 17, 2023, 12:38pm 4

@tyf
thank you very much, teacher! can you also answer my another question?

Topic		Replies	Views
Where is the Auth0 public key to be used in jwt.io to verify the signature of a RS256 token? Get Help auth0 , certificate , jwtio , rsa	6	42420	September 15, 2022
Will public key from JWKS go invalid Get Help jwks , jwt-validation , python	4	6548	August 19, 2019
Unable to validate RSA256 access token Get Help rsa256 , verify-token	2	5046	March 2, 2018
Verify RS256-signed JWT tokens Get Help oauth-2-0 , protocols	2	1798	March 29, 2023
Why do I need a private key to verify a JWT? JWT.io jwt , rs256	5	3705	March 18, 2024

With RS256, if the private key is rotated, can old pubic key validate the JWT signature?

Related topics