JwkKey

Public key that verifies the signature of the access tokens (JSON Web Key, RFC 7517)

kidstringrequired

Id of the key: the kid in the header of the tokens it signs

Example: api-key-20240101

ktystringrequired

Key type: RSA

Example: RSA

algstringrequired

Signature algorithm: RS256

Example: RS256

usestringrequired

Use of the key: sig, signature

Example: sig

nstringrequired

RSA modulus, base64url-encoded

Example: uUp7zN1...

estringrequired

RSA public exponent, base64url-encoded

Example: AQAB

statusstring | nullnullable

active: signs the new tokens; trusted: no longer signs, but verifies the tokens already issued; retired: verifies the tokens already issued until they expire, then leaves the set

Example: trusted

JwkKey

{
  "kid": "api-key-20240101",
  "kty": "RSA",
  "alg": "RS256",
  "use": "sig",
  "n": "uUp7zN1...",
  "e": "AQAB",
  "status": "trusted"
}