I 've a pair of private and public ssh keys, which I'm using in encrypting and decrypting my JWT.
So I'm creating and signing my JWT with my private key and shared the public key with the client who then use it to decode the JWT.
Now, I'll be frequently using the private key to do this, so, how/where do I store my private key?
My application spans across multiple server instances. So do I store the private key file (.pem file) in my application code, so that whenever it's deployed to a new instance, it can be used easily or do I store it in db? Or is neither of these correct?
Can someone please help me with this?