Re-encrypt a JWE (Compact or General JSON)

Decrypts the incoming JWE under its embedded kid,
or under sourceKidOverride if no kid is present,
then re-encrypts into a fresh JWE under newKid.

Supports both JWE Compact Serialization (SIMPLE keys) and JWE General JSON Serialization (COMPOSITE keys).
Output format matches the destination key type.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

JSON object with:
jweToken – original JWE to decrypt and re-encrypt (String for Compact format, Map for General JSON format)
newKid – key ID for the new JWE's public key
sourceKidOverrideoptional key ID to use if the incoming JWE header has no kid

Request body for JWE re-encryption (Compact or General JSON), with optional fallback for missing header KID.

string

JWE token originally encrypted for the source key. Type depends on key: String (SIMPLE) or Map (COMPOSITE).

string
required
length ≥ 1

Key ID of the public key that will protect the new JWE.

string
required

Optional fallback key ID to decrypt when the incoming JWE header has no kid.

Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Language
Credentials
Bearer
JWT
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json