hi, do the public keys for JWT verification rotate?

hey! The session's access token's keys rotate, but for the JWT that is issued on "top" of the session, their keys do not (yet)

ok, great. because I want to use Caddy server as a proxy but its auth module can only read it as a string and not fetch it from an url

ah right. So this works out then.

yes, I can only fetch it before startup and it will not change. Thanks! If you decide to implement a rotation on the core, maybe keep it optional so you can switch it off

Oh yea. for sure.

is it possible to set the signing key or is that generated on startup of the core?

generated on core startup