Get JWT keys

Retrieve JWKs for JWT verification, containing both static and dynamic keys.

GET/appid-{appId}/recipe/jwt/jwksdeprecated

Authorization

api-keyAPI key · headerrequired

The core service API token. If you are using a self-hosted core service and you have not generated a token, you can omit the header.

Header parameters

ridstring

cdi-versionstring

X.Y of the X.Y.Z CDI version.

Responses

200Retrieve JWKs for JWT verification, containing both static and dynamic keys.

statusstring

Allowed:OK

keysjwk[]

Show properties

Array of jwk

algcreateJWTAlgorithm

The algorithm to use when creating the JWT.

Allowed:RS256

ktystring

usestring

kidstring

Unique identifier for the JWK

x5cstring[]

X.509 Certificate Chain

400error code 400

string

404error code 404

string

500error code 500

string

Try it

Server

Custom base URLOverrides the selected server when set.

Authorization

API keyRemember on this deviceInclude my values in samples

Parameters

ridheadercdi-versionheaderX.Y of the X.Y.Z CDI version.

Request

curl -X GET "/appid-{appId}/recipe/jwt/jwks" \
  -H "api-key: YOUR_API_KEY"

const response = await fetch("/appid-{appId}/recipe/jwt/jwks", {
  method: "GET",
  headers: {
    "api-key": "YOUR_API_KEY"
  }
});

import requests

response = requests.get(
    "/appid-{appId}/recipe/jwt/jwks",
    headers={
        "api-key": "YOUR_API_KEY"
    },
)

Response

{
  "status": "OK",
  "keys": [
    {
      "alg": "RS256",
      "kty": "RSA",
      "use": "sig",
      "kid": "string",
      "x5c": [
        "string"
      ]
    }
  ]
}

"string"

"Not Found"

"Internal Error"