API Shield - Symmetric key support for JWT validation
API Shield JSON Web Token validation now supports symmetric keys using HS256, HS384, and HS512 algorithms. HMAC verification keys can be configured via the Cloudflare dashboard or API, with credentials never stored in plaintext.
API Shield JSON Web Token validation now supports symmetric keys that use the HS256, HS384, and HS512 algorithms. You can configure HMAC verification keys in the Cloudflare dashboard or with the Cloudflare API.
Cloudflare never stores symmetric credentials in plaintext. API responses do not include the credential.
Refer to Configure JWT validation via the API for supported key formats and credential requirements.
Source: original entry ↗
More from Cloudflare
Follow Cloudflare to get its new changes in your feed and email digest.
Cloudflare One Client for Windows - Hotfix for split tunnel disconnections
This release resolves an issue where the Windows Cloudflare One Client could repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
Cloudflare One Client for macOS - Split tunnel hostname fix
This hotfix resolves an issue where the Cloudflare One Client for macOS would repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
Cloudflare One Client for Linux - Split tunnel hostname configuration fix
Fixed an issue where the Linux client would repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply, improving stability for users with complex tunnel setups.