<![CDATA[Topics tagged with keys]]>https://fusionauth.io/community/forum/tags/keysRSS for NodeWed, 12 Aug 2026 08:48:12 GMTInvalid Date60<![CDATA[Jwks doesn't have key to match kid or alg from JWT (client credentials token)]]>The tenant is using the "Default signing key (HS256)" for the access token.

]]>https://fusionauth.io/community/forum/topic/2150/jwks-doesn-t-have-key-to-match-kid-or-alg-from-jwt-client-credentials-tokenhttps://fusionauth.io/community/forum/topic/2150/jwks-doesn-t-have-key-to-match-kid-or-alg-from-jwt-client-credentials-tokenInvalid Date<![CDATA[Clicked the regenerate key button on the reactor page]]>@saleenajohn49 said in Clicked the regenerate key button on the reactor page:

A nuclear reactor produces and controls the release of energy from splitting the atoms of certain elements. In a nuclear power reactor, the energy released is used as heat to make steam to generate electricity. (In a research reactor the main purpose is to utilise the actual neutrons produced in the core. In most naval reactors, steam drives a turbine directly for propulsion.

Ha ha.. yep, that is pretty much how the FusionAuth Reactor works too. 😆

]]>https://fusionauth.io/community/forum/topic/1246/clicked-the-regenerate-key-button-on-the-reactor-pagehttps://fusionauth.io/community/forum/topic/1246/clicked-the-regenerate-key-button-on-the-reactor-pageInvalid Date<![CDATA[How can I sync my RSA or Elliptical keypairs between environments?]]>If you need to keep everything in sync between your dev, staging and production systems, I believe the best way to accomplish that is to create the key-pair outside of FusionAuth and use the “Import RSA key pair” functionality.

If you are using the UI, you can find that under "Settings -> Key master". The button in the upper right hand corner lets you select between the different options:

Screen Shot 2020-09-24 at 1.48.38 PM.png

You can of course also use the API to import the keys: https://fusionauth.io/docs/v1/tech/apis/keys

]]>https://fusionauth.io/community/forum/topic/424/how-can-i-sync-my-rsa-or-elliptical-keypairs-between-environmentshttps://fusionauth.io/community/forum/topic/424/how-can-i-sync-my-rsa-or-elliptical-keypairs-between-environmentsInvalid Date<![CDATA[I imported a public key and am not seeing the kid in the jwks endpoint.]]>We only publish keys that we can use for signing, so a public key all by itself will not be published via JWKS. If you import the entire key pair, it will be published on the JWKS endpoint.

You can also generate a keypair too.

]]>https://fusionauth.io/community/forum/topic/404/i-imported-a-public-key-and-am-not-seeing-the-kid-in-the-jwks-endpointhttps://fusionauth.io/community/forum/topic/404/i-imported-a-public-key-and-am-not-seeing-the-kid-in-the-jwks-endpointInvalid Date<![CDATA[My JWKS are always empty]]>Symmetric keys are not returned on the JWKS endpoint, as they don't have a public key. Per the docs this api:

returns public keys generated by FusionAuth, used to cryptographically verify JWTs using the JSON Web Key format

If you create an RSA or EC key which is an asymmetric key pair - the public key will be returned on the JWKS endpoint. If you don’t have any key pairs configured , it will be empty. Out of the box, you’ll only have one HMAC key which we don’t publish in JWKS.

]]>https://fusionauth.io/community/forum/topic/233/my-jwks-are-always-emptyhttps://fusionauth.io/community/forum/topic/233/my-jwks-are-always-emptyInvalid Date<![CDATA[Can I automatically rotate my JWT signing keys?]]>The team wrote a tutorial outlining how to rotate keys, including signing keys: https://fusionauth.io/docs/v1/tech/tutorials/key-rotation/

]]>https://fusionauth.io/community/forum/topic/132/can-i-automatically-rotate-my-jwt-signing-keyshttps://fusionauth.io/community/forum/topic/132/can-i-automatically-rotate-my-jwt-signing-keysInvalid Date