Feature
API Shield - Symmetric key support for JWT validation
API Shield JSON Web Token validation now supports symmetric keys using HS256, HS384, and HS512 algorithms. HMAC verification keys can be configured via the Cloudflare dashboard or API, with credentials never stored in plaintext.
API Shield JSON Web Token validation now supports symmetric keys that use the HS256, HS384, and HS512 algorithms. You can configure HMAC verification keys in the Cloudflare dashboard or with the Cloudflare API.
Cloudflare never stores symmetric credentials in plaintext. API responses do not include the credential.
Refer to Configure JWT validation via the API for supported key formats and credential requirements.
api-shieldjwtauthenticationsecurityapi
Source: original entry ↗