title: Using JWT with Google App Engine
body: <p>I'm trying to adapt this example to use with GAE: <a href="https://bitbucket.org/b_c/jose4j/wiki/JWT%20Examples" rel="nofollow">https://bitbucket.org/b_c/jose4j/wiki/JWT%20Examples</a> </p>
  
  <p>Above example requires a private key (secret) to sign JWT header + payload. <a href="https://cloud.google.com/appengine/docs/java/javadoc/com/google/appengine/api/appidentity/AppIdentityService" rel="nofollow">AppIdentityService</a> provides a way to sign arbitrary bytes but it does not explain how to verify the signature using <code>PublicCertificate</code>. </p>
  
  <p>I need help to identify 2 things- </p>
  
  <ol>
  <li>How to store and manage secret key in Google App Engine? </li>
  <li>How to verify signature using AppIdentityService?</li>
  </ol>
  
  <p>A reference to some working example which uses JWT with GAE would be very helpful.</p>