Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.prelude.so/llms.txt

Use this file to discover all available pages before exploring further.

Prelude Auth uses JSON Web Key Sets (JWKS) for secure cryptographic operations, particularly for signing and verifying JSON Web Tokens (JWTs) used in the authentication process.

​
What is a JWKS?

A JSON Web Key Set (JWKS) is a JSON data structure that represents a set of cryptographic keys. The JWK specification is defined in RFC 7517 and provides a standardized format for representing cryptographic keys used in various security operations.

​
How Prelude Uses JWKS

Prelude Auth uses JWKS primarily for:
  1. Signing Access Tokens: When a user authenticates, the API generates a JWT access token signed with a private key.
  2. Token Verification: Client applications can use the corresponding public key to verify the authenticity of tokens.

​
JWKS Endpoint

Prelude Auth provides a public endpoint to retrieve the JWKS used for token verification for your application: https://<app_id>.session.prelude.dev/.well-known/jwks.json.