Resources

Docs
Articles
Blog
Release Notes
Install

Resources

Docs
Articles
Blog
Release Notes
Install

🤖 For AI agents: The complete documentation index is available at /docs/llms.txt. A markdown version of this page is available at /docs/extend/events-and-webhooks/events/jwt.md.

JWT

Edit on GitHubEdit MD

Edit on GitHubEdit

This section contains information about JWT events in FusionAuth.

JWT Public Key Update

JWT Refresh Token Revoke

JWT Refresh

On this page

Get Started

Install

Overview Docker First Time Setup Upgrade fusionauth-appInstall a Database Install a Search Engine Start & Stop

Development

OverviewAccess from the InternetAPI MCP ServerDocs MCP ServerKickstart

Kubernetes

OverviewDeploy with k8sElastic Kubernetes Service (EKS)Google Kubernetes Engine (GKE)Local Cluster with minikubeMicrosoft Azure Kubernetes Service (AKS)

Install Reference

OverviewAir-gappingCollected MetricsCustomize Docker ImagesPackagesServer LayoutSilent ModeSystem Requirements

Product Tour

OverviewStep 1 - Install FusionAuthStep 2 - Login ButtonStep 3 - Protected PagesStep 4 - Role-Based Access ControlStep 5 - Session ManagementStep 6 - LogoutStep 7 - TestingStep 8 - Finished

QuickStarts

Web

OverviewExpress.NETDrupalGolangLaravelNext.jsNuxtPHPPython DjangoPython FlaskRemixRuby on RailsRust with ActixSpring Boot With ThymeleafWordPress

Single-page App

OverviewReactAngularVue.js

App

OverviewAndroid Java - AppAuthAndroid Kotlin - Fusionauth SDKFlutteriOS Swift - AppAuthiOS Swift - FusionAuth SDKReact Native

API

Overview.NET APIGolang APILaravel APINode.js/Express.js APIRuby on Rails APISpring Boot API

Core Concepts

OverviewApplicationsOAuth ScopesTenantsUsersEntity ManagementGroupsRegistrationsRolesTypesAuthentication and AuthorizationIdentity ProvidersIntegration PointsLocalization and InternationalizationLogin Pages - Hosted or APILicensingLimitationsPlans and FeaturesPremium Features

Use Cases

OverviewAuth as a ServiceApp SuiteBusiness To Business To ConsumerBusiness To Business To EmployeeMachine To Machine CommunicationIdentity BrokerAuthorization HubAPI Consents Platform

Install from a Marketplace

OverviewAWSDigitalOceanGitHub ActionsGoogle CloudRender

Customize

Themes

OverviewCustomize Advanced ThemesOverviewUpgrade an Advanced ThemeAdvanced Theme Upgrade NotesTheme ExamplesAdd a Theme to a KickstartTailwind CSSTheme Template VariablesThemes Helper Macros
Simple Theme EditorApplication-Specific ThemesClient-side Password Rule ValidationTheme Localization

Email & Messages

OverviewApplication Email TemplatesAdd a Custom Generic MessengerMessengersSend Messages with TwilioConfigure SMTPEmail TemplatesEmail VariablesMessage TemplatesMessage VariablesPre-1.26 2FAOverviewTwilio IntegrationTwo-Factor with Google AuthenticatorTwo-Factor with Twilio Push Notifications

Operate

Deploy

OverviewFusionAuth and ProxiesFusionAuth And TerraformFusionAuth Cluster SetupUpgrade FusionAuthUser Support Guide

Monitor

OverviewCloudWatchDatadogElasticOpenTelemetryPrometheus, Loki, And GrafanaSlackSplunk

Roadmap

OverviewDeprecation PolicyReleases

Secure

OverviewAdvanced Threat DetectionBreached Password DetectionCompliance FrameworksCORS ReferenceKey MasterKey RotationNetworking ConfigurationToken Storage

Troubleshooting

Overview1.69.0 Key Configuration Migration GuideTechnical Support

Extend

Events & Webhooks

Events

Overview Audit Log Create Event Log Create

JWT

OverviewPublic Key UpdateRefreshRefresh Token Revoke

Kickstart Success

Entity

CreateCreate CompleteDeleteDelete CompleteUpdateUpdate Complete

Group

CreateCreate CompleteDeleteDelete CompleteMember AddMember Add CompleteMember RemoveMember Remove CompleteMember UpdateMember Update CompleteUpdateUpdate Complete

User

ActionBulk CreateCreateCreate CompleteDeactivateDeleteDelete CompleteEmail UpdateEmail VerifiedIdentity Provider LinkIdentity Provider UnlinkIdentity VerifiedReactivateTwo-factor ChallengeTwo-factor Failed AttemptTwo-factor Method AddTwo-factor Method RemoveTwo-Factor SuccessUpdateUpdate CompleteLoginFailedId Duplicate CreateId Duplicate UpdateNew DeviceSuccessSuspicious
PasswordBreachReset SendReset StartReset SuccessUpdate
RegistrationCreateCreate CompleteDeleteDelete CompleteUpdateUpdate CompleteVerified

Kafka Integration

Secure Webhooks Sign Webhooks Webhook Event Log Write a Webhook

Fine-Grained Authorization

Code

Lambdas

OverviewCall an API from a LambdaTest LambdasClient Credentials JWT Populate LambdaJWT Populate LambdaLogin Validation LambdaMFA Requirement LambdaSAML v2 Populate LambdaSCIM Group Request Converter LambdaSCIM Group Response Converter LambdaSCIM User Request Converter LambdaSCIM User Response Converter LambdaSelf-Service Registration Validation LambdaUserInfo Populate LambdaReconcileApple Reconcile LambdaEpic Games Reconcile LambdaExternal JWT Reconcile LambdaFacebook Reconcile LambdaGoogle Reconcile LambdaHYPR Reconcile LambdaLDAP Connector Reconcile LambdaLinkedIn Reconcile LambdaNintendo Reconcile LambdaOpenID Connect Reconcile LambdaSAML v2 Reconcile LambdaSony PlayStation Network Reconcile LambdaSteam Reconcile LambdaTwitch Reconcile LambdaTwitter Reconcile LambdaXbox Reconcile Lambda

Plugins

OverviewCustom Password HashingWriting a Plugin

Examples

5 Minute Intro

OverviewDocker InstallFast Path InstallSandbox

API Gateways

OverviewAmazon API GatewayCloudflare Worker Functions (API Gateway)HAProxy API GatewayKong Gatewayngrok Cloud EdgeSecuring your APIs with FusionAuth

Control MCP Server Access Device Limiting Example Applications Modeling Hierarchies Modeling Organizations Multi-Application Dashboard Multi-tenancy Twilio Segment

Lifecycle

Migrate Users

Connectors

OverviewFusionAuth ConnectorGeneric ConnectorLDAP Connector

Export from FusionAuth Generic Migration Tutorial

SCIM

OverviewAzure AD SCIM ClientOkta SCIM ClientSCIM-SDK

Framework Specific

Migrate From Passport Migrate From Rails

Provider Specific

Migrate From AkamaiMigrate From Amazon CognitoMigrate From Auth0Migrate From Duende IdentityServerMigrate From FirebaseMigrate From ForgerockMigrate From FronteggMigrate From KeycloakMigrate From Microsoft Azure AD B2CMigrate From Ping IdentityMigrate From StytchMigrate From SupabaseMigrate From UserfrontMigrate From WordPress

Register Users

OverviewAdvanced Registration FormsAnonymous UsersComplete RegistrationRegister A User And LoginSelf-service Registration

Authenticate Users

Add an Identity Provider (IdP)

Overview Add an OpenID Connect IdP Add an External SAML v2 IdP

Add an External JWT IdP

Overview External JWT IdP Example Usage

Enterprise

Add a HYPR IdPAdd a OpenID Connect with Cognito IdPAdd a SAML v2 IdP-Initiated IdPAdd a SAML v2 IdP-Initiated with Okta IdPAdd a SAML v2 with ADFS IdPAdd a SAML v2 with Azure AD IdPAdd a SAML v2 with Okta IdPAdd an OpenID Connect with Azure AD IdPAdd an OpenID Connect with Okta IdP

Gaming

Add a Nintendo IdPAdd a Sony PlayStation Network IdPAdd a Steam IdPAdd a Twitch IdPAdd an Epic Games IdPAdd an OpenID Connect with Discord IdPAdd an Xbox IdP

Social

Add a Facebook IdPAdd a Github IdPAdd a Google IdPAdd a LinkedIn IdPAdd a Twitter/X IdPAdd an Apple IdP

Build a Login Page with the Login API

Overview JSON Web Tokens

OAuth

OverviewAccess Control with OAuth ScopesManage Software TokensModesOAuth DPoPOAuth Issuer ValidationOAuth Response ModesOIDC PromptURL Validation

Passwordless Login Overview

OverviewAuthentication With Magic Links & One-Time PasswordsAuthentication With WebAuthn & PasskeysConfigure WebAuthn

Application Authentication Tokens Contextual Multi-Factor Authentication (MFA)Host a SAML v2 Identity Provider Implementing Single Sign-on Logout And Session Management Multi-Factor Authentication (MFA)Risk Signals Setting Up User Account Lockout

Integrations

OpenID Connect Integrations

OverviewOIDC & CockroachDBOIDC & SalesforceOIDC & Tableau Cloud

SAML

OverviewSAML v2 & AivenSAML v2 & GoogleSAML v2 & PagerDutySAML v2 & SendGridSAML v2 & Tableau CloudSAML v2 & Zendesk

Manage Users

Self-Service Account Management

OverviewAccount TroubleshootingAdd Authenticator as a second factorAdd Email as a second factorAdd Phone as a second factorAdd WebAuthn PasskeyBootstrapping Login For Self-Service Account ManagementCustomizing Self-Service Account ManagementUpdate User Profiles and Passwords

Tenant Manager App CleanSpeak Integration Custom Admin Forms How To Use User Actions

Search

OverviewSearching Users With Elasticsearch or OpenSearchSwitching Search Engines

Verification

Gate Users Application RegistrationGate Users Until They Verify Their EmailGate Users Until They Verify Their PhoneIdentity Pre-Verification Using Email Verification FormIdentity Pre-Verification Using Phone Verification FormIdentity Pre-Verification Via APIRegistration-based Email Verification

Client Libraries and SDKs

OverviewExample AppsOverview.NET Core Example AppsGo Example AppsJava Example AppsPHP Example AppsPython Example AppsRuby Example AppsTypescript, Node and JavaScript Example Apps
OpenAPI SpecificationReact SDKVue SDKAngular SDKKotlin SDK for AndroidSwift SDK for iOS.NET Core Client LibraryGo Client LibraryJava Client LibraryPHP Client LibraryPython Client LibraryRuby Client LibraryTypeScript Client Library

Reference

OverviewAPI Endpoints Guarded by API KeysAuthentication TypesConfiguration ReferenceData TypesGDPR ComplianceIndexed Entity FieldsIndexed User FieldsLogin Page CookiesPassword-Hashing AlgorithmsRequired Network Hostname Access

APIs

Overview Authenticate with our APIs Configure CORS Error Responses

Identity Provider

OverviewAppleEpic GamesExternal JWTFacebookGoogleHYPRLinkedInLinksNintendoOpenID ConnectSAML v2SAML v2 IdP InitiatedSony PlayStation NetworkSteamTestTwitchTwitter/XXbox

Messenger

OverviewGeneric MessengerTwilio Messenger

SCIM

OverviewEnterpriseUserGroupService ProviderUser

Connector

OverviewGeneric ConnectorLDAP Connector

Custom Form

OverviewFormForm Field

Entity

OverviewEntityEntity TypeGrant

Theme

OverviewAdvanced ThemesSimple Themes

API Keys

OverviewCreate an API KeyRetrieve an API KeyUpdate an API KeyDelete an API Key

Application

OverviewCreate an ApplicationRetrieve an ApplicationUpdate an ApplicationSearch for ApplicationsDelete an ApplicationReactivate an ApplicationCreate an Application RoleUpdate an Application RoleDelete an Application RoleRetrieve OAuth Configuration

Audit Log

OverviewSearch the Audit LogAdd an Entry to the Audit LogRetrieve an Audit LogExport Audit Logs

Consent

OverviewCreate a ConsentRetrieve a ConsentUpdate a ConsentDelete a ConsentSearch for ConsentsGrant a User ConsentRetrieve a User ConsentUpdate a User ConsentRevoke a User Consent

Email

OverviewCreate an Email TemplateRetrieve an Email TemplateSearch for Email TemplatesUpdate an Email TemplateDelete an Email TemplatePreview an Email TemplateSend an Email

Family

OverviewAdd a User to a FamilyRetrieve a FamilyUpdate a FamilyRemove a User from a FamilyRetrieve Pending Family MembersRequest Parental Approval

Group

OverviewCreate a GroupRetrieve a GroupUpdate a GroupDelete a GroupSearch for GroupsAdd Users to a GroupUpdate Users in a GroupRemove Users from a GroupSearch for Group Members

Hosted Backend Identity Verify Integration

IP Access Control List

OverviewCreate an IP ACLRetrieve an IP ACLSearch for IP ACLsUpdate an IP ACLDelete an IP ACL

JWTs & Refresh Token

OverviewIssue a JWTReconcile a JWT Using the External JWT ProviderRetrieve Public KeysRefresh a JWTRetrieve Refresh TokensRevoke Refresh TokensValidate a JWTVend a JWT

Key

OverviewRetrieve a KeyUpdate a KeyDelete a KeySearch for KeysGenerate a KeyImport a Key

Lambda

OverviewCreate a LambdaRetrieve a LambdaSearch for LambdasUpdate a LambdaDelete a Lambda

Login

OverviewAuthenticate a UserAuthenticate a User with a One Time PasswordComplete Multi-Factor AuthenticationUpdate Login InstantLogout a UserSearch Login RecordsExport Login Records

Manage User Action

OverviewCreate a User ActionRetrieve a User ActionUpdate a User ActionDelete a User ActionReactivate a User Action

Message Template

Multi-Factor

OverviewEnable Multi-FactorDisable Multi-FactorUpdate Multi-Factor MethodGenerate a SecretStart Multi-FactorRetrieve Multi-Factor StatusSend a Multi-Factor Code During Login or Step UpSend a Multi-Factor Code When Enabling MFASend a Multi-Factor Code When Disabling MFAGenerate Recovery CodesRetrieve Recovery Codes

OAuth2

OverviewAuthorizeLogoutTokenDeviceIntrospectUserInfoJSON Web Key Set (JWKS)OpenID ConfigurationOAuth Error ReferenceClient Secret Reference

Passwordless

OverviewStart Passwordless LoginSend Passwordless LoginComplete a Passwordless Login

Report

OverviewRetrieve Totals ReportRetrieve Daily Active Users ReportRetrieve Login ReportRetrieve Monthly Active Users ReportRetrieve Registration Report

System

OverviewRetrieve the System ConfigurationUpdate the System ConfigurationExport System LogsRetrieve the Logging LevelUpdate the Logging LevelRebuild the Elasticsearch indexRetrieve the status of an index rebuildRetrieve System StatusRetrieve System HealthRetrieve System VersionRetrieve System Metrics Using Prometheus

Tenants

OverviewCreate a TenantRetrieve a TenantSearch for TenantsUpdate a TenantDelete a TenantRetrieve the Password Validation Rules

User

OverviewCreate a UserRetrieve a UserUpdate a UserDelete a UserBulk Delete UsersReactivate a UserImport UsersImport Refresh TokensSearch for UsersFlush the Search EngineRetrieve Recent LoginsVerify a User's EmailResend Verification EmailStart Forgot Password WorkflowValidate a Password ChangeChange a User's Password

User Action User Action Reason

User Comment

OverviewAdd a Comment to a UserRetrieve a User's CommentsSearch for User Comments

User Registration

OverviewCreate a User Registration (for an existing user)Create a User and Registration (combined)Retrieve a User RegistrationUpdate a User RegistrationDelete a User RegistrationVerify a User RegistrationResend a User Registration Verification Email

WebAuthn

OverviewRetrieve a PasskeyDelete a PasskeyImport PasskeysStart a WebAuthn Passkey RegistrationComplete a WebAuthn Passkey RegistrationStart a WebAuthn Passkey Assertion or AuthenticationComplete a WebAuthn Passkey AuthenticationComplete a WebAuthn Passkey Assertion

Webhook

OverviewCreate a WebhookRetrieve a WebhookUpdate a WebhookDelete a WebhookSearch for Webhooks

Webhook Event Log

Cloud

Account

OverviewCreateDelete

Create a Deployment Upgrade a Deployment Delete a Deployment

Operate

OverviewCustom DomainsAlter a DeploymentProxyLoad TestMigrateEmigrateSecurityTest

Reference

OverviewFusionAuth Cloud LimitsRegionsInstance IP AddressesSLADisaster RecoveryUser Data

Developer Tools

OverviewBase64 Encoder/DecoderEpoch/Unix Time ConverterJWT DecoderURL Encoder/DecoderUUID Generator

FusionAuth

Get Started

download locally
FusionAuth Cloud
quickstarts

product

features
pricing

developers

SDKs
API Docs
Documentation
release notes
trust center

resources

support forum
FusionAuth Cloud status
blog
articles

© 2026 FusionAuth. All Rights Reserved.License •License FAQ •Privacy•Product Privacy Policy•Cookie Policy