Rotate Jwt Key Route

§10.6: rotate the signing key. The OLD kid stays in the keyset (grace-retained, still published in /jwks, still verifiable) until its grace window passes; new tokens are signed with the NEW kid. A site refreshing JWKS from the cloud keeps verifying BOTH, so rotation is zero-downtime. Admin-only (owner session, role='admin').

post/api/admin/keys/rotate

Request

  • Base URL: https://authyouragent.com (the document declares no server; this is the origin it was published from)
  • URL: https://authyouragent.com/api/admin/keys/rotate
  • Auth: none declared

Request body

object required

Response

Successful Response

unknown required

Changes