Rotating keys signs out clients that still cache the old one.
- Prior incident
- Last rotation signed out every mobile session for 40 minutes
- Constraint
- Publish the new key 24 hours before signing with it
- Owner
- Identity team — on-call approves rotations
- Postmortem · token rotation
- GitHub · PR #412
- Slack · #identity