Additional Notes
What does the `kid` header do?
Track: Java
Topic: Authentication
Focus: JWT Signatures
Java: JWT Signatures
Answer
It identifies which signing key should validate the token.
When multiple signing keys exist during rotation, the `kid` header helps the server select the right key. This makes safe key rollout and incident recovery much easier.
When multiple signing keys exist during rotation, the `kid` header helps the server select the right key. This makes safe key rollout and incident recovery much easier.
Topics: Authentication Java JWT Signatures