Skip to main content

JWKS (JSON Web Key Set)

The JSON Web Key Set (JWKS) is a set of keys that can be used by clients to validate the signatures of JWTs.

It contains an array of JWKs, allowing for multiple keys to be provided in a single response.

keys object[]required

An array of JSON Web Keys (JWKs) that can be used to verify JWT signatures.

  • Array [
    • kidstringrequired

    The key ID, a unique identifier for the key. This helps clients select the appropriate key for verification.

    Example: HFSdUzsX5GRQ7LrkqZusDAhyItKI3YADzfOjYFZ31QA
    ktystringrequired

    The key type, indicating the algorithm used with the key. Common values are "RSA" and "EC".

    Example: RSA
    algstringrequired

    The algorithm intended for use with the key. It indicates how the key should be used when signing or verifying tokens.

    Example: RS256
    usestringrequired

    The intended use of the key. Common uses are "sig" (signature) and "enc" (encryption).

    Example: sig
    nstringrequired

    The modulus of the RSA key, used in key generation and verification.

    Example: 6NLoKDS41mlmtYD7FavFs1SY72TLojFVBY_LMlbuhdF2DudY1uUpbPnzE2rkU3HJiZrWSxfkRJmNKcCo2X8DrhbQp4lOavcAss_jNVNTZieEbQUHTp1WchAumzYS24BB0SMr0wNpYcxaj-KDttgkUb5sBycopr8WC8mcpL86ATOYoJ24E7YzY_mrhOeHAAEYmAXlJy-1EkNbpGwv4UI_4ofmY17FmnwDVcBLVIWtodKr8d4Gj3rzAT-eezN6WuRsLuMznI5gshkparlrZXoaLgOGFsPrW24cbAekSg1HWXzMSjfXlnhb3_u-TfwscsqUAgeXYoSf-S90JxVlDcxs4w
    estringrequired

    The exponent of the RSA key, which is used along with the modulus.

    Example: AQAB
    x5cstring[]

    An array of X.509 certificate strings, representing the public key's certificate chain. These certificates can be used for further validation of the key.

    Example: ["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"]
    x5tstring

    The SHA-1 thumbprint of the X.509 certificate. This thumbprint provides a way to reference the certificate in a compact manner.

    Example: lcP9nH8u-OVlagJs6jJhS8SoTSQ
    x5t#S256string

    The SHA-256 thumbprint of the X.509 certificate, providing an alternative method for referencing the certificate.

    Example: pJZPEQrWJDfpyAHDsV3P3pykagsiPbDzYr2e7S-AorA
  • ]
    • JWKS (JSON Web Key Set)
    {
      "keys": [
        {
          "kid": "hD0tEgg4XkrXY1FeXPK5H3ggxGgShEVT90NRo6QAj_Y",
          "kty": "RSA",
          "alg": "RS256",
          "use": "sig",
          "n": "40s2WP_BLdTZ7XD3Hg12ruTfJRILKADZ5IWS7976EDpaGUSHKou6DoaBbAUjakC3nvFj3Kh0xmFYkW14aeAAjO_VrPn1jSQD0tV_JkD1U4Y96Etp_04QhfXuLLZRXkdvY4d7gzrfA4XzK2V2b6qmA7KFPFxSWNR48fRHEsLonVapZSgTFdoNc_zq_N0Dmj3KbCpa2Zs5a1Wqw2v4TnAYpflWH08gcK6Vz-YXwBzkXZ6o8eYNhgRe639adAhkS9_fUUY3wD7pBMOXhWqz7Hincf26Lfer3Y3-iS8S-JBxALCk3u9WyxoY-7hWTDsrXY70GlyJSUUAec66iUQqu-cb9Q",
          "e": "AQAB",
          "x5c": [
            "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"
          ],
          "x5t": "gXQAwRHsjr551S79L1-p8NrwxhQ",
          "x5t#S256": "LeRHb9ECrHHKmQre1HKVEqm4hNcI8tvbJkLFhmyFAF4"
        }
      ]
    }