CCloud Releases
Home
Following

Cloud Releases

Service catalogues and updates come from each provider's public product listing and announcements.

Explore

  • Home
  • Latest updates
  • Following

About

  • About
  • Contact
  • Privacy Policy
  • Terms of Use

Providers

  • Amazon Web Services
  • Microsoft Azure
  • Google Cloud
  • Cloudflare

Not affiliated with any cloud provider. Product names and logos belong to their owners.

  1. Providers
  2. ›Cloudflare
  3. ›API Shield
  4. ›Update

Feature•Aug 25, 2026

Symmetric key support for JWT validation

API ShieldCloudflare · Application security

API Shield JSON Web Token validation now supports symmetric keys that use the HS256, HS384, and HS512 algorithms. You can configure HMAC verification keys in the Cloudflare dashboard or with the Cloudflare API.

Cloudflare never stores symmetric credentials in plaintext. API responses do not include the credential.

Refer to Configure JWT validation via the API for supported key formats and credential requirements.

Read the original announcement↗

More from API Shield

All API Shield updates →

  1. Run schema learning on demand

    You can now manually request an API Shield schema learning run without waiting for the weekly schedule. Use this during testing after sending representative traffic to your API.

    API Shield•Feature•Oct 12, 2026

  2. Increased limits for JWT validation configurations

    API Shield JSON Web Token validation now supports 32 token configurations per zone by default. Each token configuration can contain up to 16 keys.

    API Shield•Feature•Aug 27, 2026

  3. Web Assets fields now available in GraphQL Analytics API

    Two new fields are now available in the httpRequestsAdaptive and httpRequestsAdaptiveGroups GraphQL Analytics API datasets:

    API Shield•Feature•Mar 23, 2026

  4. New Vulnerability Scanner for API Shield

    Introducing Cloudflare's Web and API Vulnerability Scanner (Open Beta)

    API Shield•Feature•Mar 9, 2026