JSON Web Key Set (public signing keys)

GET/.well-known/jwks.json

The public keys clients use to verify issued tokens (RFC 7517).

GET/.well-known/jwks.json

curl 'https://auth.example.com/.well-known/jwks.json'

Response

200 OK

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "kid": "7Xy1t...abc",
      "alg": "ES256",
      "crv": "P-256",
      "x": "f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU",
      "y": "x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0"
    }
  ]
}

Authorization

None. This endpoint does not take API credentials.

Responses

200 OKapplication/jsonThe active public verification keys.
The active public verification keys.
Body
A JSON Web Key Set.
- keysarray of objectsrequired
  A public JSON Web Key (RFC 7517). Two key types are published: EC (kty=EC, ES256/P-256) carries crv/x/y per RFC 7518 §6.2, and RSA (kty=RSA, RS256) carries n/e per RFC 7518 §6.3. The two member sets are mutually exclusive, so only kty/use/kid/alg are required — a key serializes exactly the members its own type defines.
  Show item attributesHide item attributes
  ktystringrequired
  Example"EC"
  usestringrequired
  Example"sig"
  kidstringrequired
  Example"7Xy1t-abc"
  algstringrequired
  Example"ES256"
  crvstring
  Example"P-256"
  xstring
  Example"f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU"
  ystring
  Example"x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0"
  nstring
  Example"0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbW"
  estring
  Example"AQAB"

PreviousOAuth 2.0 Authorization Server Metadata NextOAuth2

JSON Web Key Set (public signing keys)

GET/.well-known/jwks.json

No credentialsCached for 5 min

The public keys clients use to verify issued tokens (RFC 7517).

GET/.well-known/jwks.json

curl 'https://auth.example.com/.well-known/jwks.json'

Response

200 OK

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "kid": "7Xy1t...abc",
      "alg": "ES256",
      "crv": "P-256",
      "x": "f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU",
      "y": "x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0"
    }
  ]
}

Authorization

None. This endpoint does not take API credentials.

Responses

200 OKapplication/jsonThe active public verification keys.
The active public verification keys.
Body
A JSON Web Key Set.
- keysarray of objectsrequired
  A public JSON Web Key (RFC 7517). Two key types are published: EC (kty=EC, ES256/P-256) carries crv/x/y per RFC 7518 §6.2, and RSA (kty=RSA, RS256) carries n/e per RFC 7518 §6.3. The two member sets are mutually exclusive, so only kty/use/kid/alg are required — a key serializes exactly the members its own type defines.
  Show item attributesHide item attributes
  ktystringrequired
  Example"EC"
  usestringrequired
  Example"sig"
  kidstringrequired
  Example"7Xy1t-abc"
  algstringrequired
  Example"ES256"
  crvstring
  Example"P-256"
  xstring
  Example"f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU"
  ystring
  Example"x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0"
  nstring
  Example"0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbW"
  estring
  Example"AQAB"

PreviousOAuth 2.0 Authorization Server Metadata NextOAuth2

Authorization

Responses

Body

Authorization

Responses

Body