---
title: "Set up the project's existing JWT secret as an in_use JWT signing key. This endpoint will be removed in the future always check for HTTP 404 Not Found."
method: POST
path: "/v1/projects/{ref}/config/auth/signing-keys/legacy"
tags: ["Auth"]
---

# Set up the project's existing JWT secret as an in_use JWT signing key. This endpoint will be removed in the future always check for HTTP 404 Not Found.

`POST /v1/projects/{ref}/config/auth/signing-keys/legacy`

## Path parameters

- `ref` string, required

## Response `201`

- SigningKeyResponse
  - `id` string, uuid, required
  - `algorithm` 'EdDSA' | 'ES256' | 'RS256' | 'HS256', required
  - `status` 'in_use' | 'previously_used' | 'revoked' | 'standby', required
  - `public_jwk` unknown
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required

## Other responses

- `401` — Unauthorized
- `403` — Forbidden action
- `429` — Rate limit exceeded

---

[API](https://skmtc.dev/supabase/apis/management-api.md) · [All operations](https://skmtc.dev/supabase/apis/management-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/supabase/management-api/revisions/a7cb39418064/schema)