Re-sign a JWS (Compact or General JSON) with a new key

Verifies the incoming JWS (Compact or General JSON Serialization) under its embedded oldKid
(or an explicit override) and, if valid, produces a replacement signature with newKid.
Supports both SIMPLE keys (Compact JWS) and COMPOSITE keys (General JSON).
Useful for algorithm migrations without touching payload bytes.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

JSON object with:
jwsToken – JWS to verify (String for Compact, Map for General JSON)
newKid – kid to use for the new signature
sourceKidOverride – optional fallback kid if the header has no kid

Request to verify an existing JWS under oldKid
(embedded in the header) and sign the same payload
with newKid. An optional sourceKidOverride
may be provided if the original JWS header does not specify a kid.

Supports both Compact (SIMPLE keys) and General JSON (COMPOSITE keys) serialization.

string

JWS signed with oldKid. Type depends on key: String (SIMPLE) or Map (COMPOSITE).

string
required
length ≥ 1

kid of the private key that must produce the new signature.

string
required

Optional fallback key ID to use when the incoming
JWS header does not include a kid.

Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Language
Credentials
Bearer
JWT
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json