DevVercelabout 14 hours ago
Vercel KMS signs JWTs without private keys
2 min read
Vercel KMS signs JWTs and arbitrary messages from Vercel Functions using managed asymmetric signing keys. Private keys stay inside Vercel's key management service, never in code or environment variables. Verifiers use only the public key via standard JOSE libraries.
Level
Hype check
Tap to vote and see what everyone thinks.
