1
0
mirror of https://github.com/taigrr/nats.docs synced 2025-01-18 04:03:23 -08:00

Update developing-with-nats/tutorials/jwt.md

Co-authored-by: Colin Sullivan <colin@synadia.com>
This commit is contained in:
Matthias Hanel 2021-02-16 13:16:58 -05:00 committed by GitHub
parent cd15efef82
commit eb31d18fe4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -632,7 +632,7 @@ Thus, depending on your scenario, relevant identity NKEYS need to only exist in
###### JWT store directory
The store directory contains JWT fora operator/account/user and does not contain key material.
The store directory contains JWTs for operators, accounts, and users. It does not contain private keys.
Therefore it is ok to back these up or even store them in a VCS such as git.
But be aware that depending on content, JWT may reveal which permissions/subjects/public-nkeys exist.
Knowing the content of a JWT does not grant access; only private keys will.