JwksResponse

Public keys of the API (JSON Web Key Set)

keys object[]required

Keys that verify the tokens, each with its status

Array [

kidstringrequired

Id of the key: the kid in the header of the tokens it signs

Example: api-key-20240101

ktystringrequired

Key type: RSA

Example: RSA

algstringrequired

Signature algorithm: RS256

Example: RS256

usestringrequired

Use of the key: sig, signature

Example: sig

nstringrequired

RSA modulus, base64url-encoded

Example: uUp7zN1...

estringrequired

RSA public exponent, base64url-encoded

Example: AQAB

statusstring | nullnullable

active: signs the new tokens; trusted: no longer signs, but verifies the tokens already issued; retired: verifies the tokens already issued until they expire, then leaves the set

Example: trusted

]

JwksResponse

{
  "keys": [
    {
      "kid": "api-key-20240101",
      "kty": "RSA",
      "alg": "RS256",
      "use": "sig",
      "n": "uUp7zN1...",
      "e": "AQAB",
      "status": "trusted"
    }
  ]
}