Skip to Content

Json Web Key

⚡ 3 min read

Generate JSON Web Keys (JWK) for backend server-side JWT verification with RS256 algorithm.


What the Json Web Key Panel Does

Automatically generate JWK (JSON Web Keys) for backend server-side verification. Supports RS256 algorithm with secure key storage for seamless integration with your authentication backend.

Panel features:

  • Generate public keys for JWT verification
  • Private key securely stored in Transcodes.io cloud
  • Public key returned once - store it securely
  • Previous public key invalidated when generating new key

The public key cannot be retrieved again after generation. Always save it immediately.


Prerequisites

  • Backend server that verifies JWT tokens

Opening the Json Web Key Panel

  1. Log in to Transcodes Console 
  2. Open your project
  3. Locate the Authentication Kit Cluster
  4. Click the key icon (🔑) labeled “Json Web Key”
  5. The panel opens on the right side

Json Web Key Panel

The Json Web Key panel appears on the right with a purple “Json Web Key” accordion section.


Generating a Public Key

The Json Web Key panel contains fields for generating and viewing your public key information.

Json Web Key Panel Details

The panel shows:

  • Backend Server-Side Verification: Description of public key purpose
  • Features: Security information about key storage and invalidation
  • Latest Public Key Info: Key ID (kid) and creation timestamp
  • Generate Public Key Json button

1. View Existing Key Info

The Latest Public Key Info section displays:

  • Key ID (kid): Unique identifier (e.g., 1fdef9ef-57e5-4fcd-84bd-2eb445efcf66)
  • Created At: Generation timestamp (e.g., 2025. 12. 16. 오후 8:21:34)

The public key content cannot be retrieved again. It was shown only once during generation.


2. Generate New Key

To generate a new key:

  1. Click the Generate Public Key Json button
  2. If a key exists, confirm you want to invalidate the previous key
  3. The public key appears in JSON format
  4. Copy or download the key immediately

Generating a new key invalidates your previous public key. Update your backend before generating a new key.


What to do next?

After setting up JWK verification:

  1. Configure token expiration settings
  2. Monitor user authentication activity
  3. Review Security Best Practices
  4. Explore Token API documentation
Last updated on