1. Docs
  2. API Reference
  3. JSON Web Key Set

JSON Web Key Set

GET/environments/{environmentId}/.well-known/jwks.json

JSON Web Key Set for an Environment (GET /environments/{environment_id}/.well-known/jwks.json on the platform host, or GET /.well-known/jwks.json on the Environment's active custom auth domain). Returns the public RS256 keys (unwrapped, per RFC 7517) that relying parties use to verify the Environment's id_token and access-token signatures: the key signing now, the one staged to sign next, and any that stopped signing in the last day, so a rotation never refuses a live token. Keys from another Environment are never listed.

Path Parameters

environmentIdstring Required

The Environment's id

Responses

application/json

  • keysJsonWebKeyDto[]*

application/json

  • errorApiErrorBodyDto*

Returned object

JsonWebKeySetResponseDtoView all properties on this resource
Request
curl -X GET "https://auth.canopy-io.com/environments/value/.well-known/jwks.json"
Response
{
  "keys": [
    {
      "kty": "RSA",
      "n": "string",
      "e": "string",
      "kid": "string",
      "alg": "RS256",
      "use": "sig"
    }
  ]
}
 Related endpoints Was this page helpful?

Tell us how we can improve this guide.

Canopy