SERVICE_SIGNING_KEY_INVALID

Service-signing key misconfigured

HTTP status 503 Service Unavailable, code SERVICE_SIGNING_KEY_INVALID.

What it means#

This API's service-signing key (SERVICE_SIGNING_KEY, or SERVICE_SIGNING_KEY_PREVIOUS) is set but is not a PEM RSA private key of 2048 bits or more, so GET /.well-known/service-jwks.json cannot publish it and no service token is signed.

What to do#

An operator sets SERVICE_SIGNING_KEY to a PEM RSA private key (2048 bits at least) and restarts the API.

On the wire#

Every error response carrying this code names this page in error.moreInfo, with the request id in the query string. See Error codes for the response shape and the list of every code.