Skip to content

Commit 9f5c89c

Browse files
committed
Change subheadings
1 parent 786a1d0 commit 9f5c89c

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/tokens/guides/manage-signing-keys.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -49,9 +49,9 @@ For this reason, available keys include:
4949
Regardless of the method you use, you should always test on a development tenant before rotating application signing keys in production.
5050
:::
5151

52-
## Rotate your application signing key
52+
## Rotate your signing key
5353

54-
Auth0 allows you to manually rotate your signing key on a periodic basis. So, for security purposes, any application that integrates with Auth0 should be prepared to handle key rotation regardless of how infrequently it may occur. If your application does not handle signing key rotation and attempts to use an expired signing key to verify a token, the authentication request will fail.
54+
Auth0 allows you to manually rotate your application signing key on a periodic basis. So, for security purposes, any application that integrates with Auth0 should be prepared to handle key rotation regardless of how infrequently it may occur. If your application does not handle signing key rotation and attempts to use an expired signing key to verify a token, the authentication request will fail.
5555

5656
Your tenant's [OpenID Connect discovery document](/tokens/guides/locate-jwks) always contains multiple keys. Specifically, it will always include both the current key and the next key, but it may also include the previous key if the previous key has not yet been revoked. To provide a seamless experience in case of emergency, your application should be able to use any of the keys specified in the document.
5757

@@ -63,7 +63,7 @@ All tokens signed with the previous key will still be valid until the previous k
6363
Make sure you have updated your application with the new key before you revoke the previous key.
6464
:::
6565

66-
## Manage your application signing keys
66+
## Manage your signing keys
6767

6868
We provide other application security key management capabilities through both our Dashboard and Management API. Through the Management API and Dashboard, you can:
6969

0 commit comments

Comments
 (0)