Products & Pricing

Features

• Scheduled rotation with configurable TTLs
• Multiple concurrent keys with kid header support
• Zero-downtime key transitions
• Webhooks for rotation events
• REST + SDK support (Node.js, Python)

Example

// Rotate your JWT secret automatically
const { secret, keyId } = await jwtSecrets.rotate({
  algorithm: 'HS256',
  bits: 256,
  ttl: '30d'
});

// Sign with the new key
const token = jwt.sign(payload, secret, {
  algorithm: 'HS256',
  keyid: keyId
});

Features

• Node.js + Express authentication setup
• Python FastAPI JWT middleware
• Docker + Kubernetes secret injection
• GitHub Actions secret rotation workflow
• Terraform KMS integration

Example

// Node.js JWT middleware example
import jwt from 'jsonwebtoken';

export function authMiddleware(req, res, next) {
  const token = req.headers.authorization?.split(' ')[1];
  if (!token) return res.status(401).json({ error: 'Unauthorized' });

  try {
    req.user = jwt.verify(token, process.env.JWT_SECRET, {
      algorithms: ['HS256'],
      audience: 'https://api.yourapp.com'
    });
    next();
  } catch {
    res.status(401).json({ error: 'Invalid token' });
  }
}