···

       
37
       
37
       
 
       


     

       
38
       
38
       
 
       
> [!NOTE]

     

       
39
       
39
       
 
       
>

     

       
40
       
40
       
-
       
> The `PRIVATE_KEYS` is an array of keys. Make sure to use single

     

       
41
       
41
       
-
       
> quotes, and square brackets around the keys `PRIVATE_KEYS='[<key here>]'`. If

     

       
42
       
42
       
-
       
> you generate multiple keys, add new keys at the beginning of the array, so

     

       
43
       
43
       
-
       
> that the first key is always the most recent one. When a key is removed, all

     

       
44
       
44
       
-
       
> associated sessions will be invalidated.

     

       
40
       
40
       
+
       
> The `PRIVATE_KEYS` can contain multiple keys. The first key in the array is

     

       
41
       
41
       
+
       
> the most recent one, and it will be used to sign new tokens. When a key is

     

       
42
       
42
       
+
       
> removed, all associated sessions will be invalidated.

     

       
45
       
43
       
 
       


     

       
46
       
44
       
 
       
Make sure to also set the `COOKIE_SECRET`, which is used to sign session

     

       
47
       
47
       
-
       
cookies, in your environment variables (`.env` file). You can generate a random

     

       
45
       
45
       
+
       
cookies, in your environment variables (`.env` file). You should use a random

     

       
48
       
46
       
 
       
string for this:

     

       
49
       
47
       
 
       


     

       
50
       
48
       
 
       
```sh