Ramesh Lingappan
1 min readSep 30, 2018

--

JWT is meant to be consumed by multiple independent microservices so they don’t have to dependent on each other, but they do depend on the Key used to validate the signature of JWT Tokens.

In your case you can store the Key in a central database like DynamoDB or MongoDB etc where other containers can access those keys and validate the signature.

Static Keys are fine as well since its have a same complexity of safely storing Key to sign JWT token, You can use services like AWS KMS and safely use in your code, and do not commit those keys to Git

--

--

No responses yet