PESU OAuth2 · Docs

GET /jwks.json

JWKS

Summary

JSON Web Key Set containing the public RSA key(s) used to verify ID tokens and access tokens (RS256).

Auth

None (public).

Parameters

None.

Example request

GET /jwks.json HTTP/1.1
Host: <issuer-host>

Success

JSON object {"keys":[{kty,kid,use,alg,n,e,...}]} for RS256 signature verification.

Errors

Code Description
503 Signing key not configured on the server.

Notes

  • Cache with normal HTTP caching; rotate by kid.
  • Matches id_token_signing_alg_values_supported from discovery (RS256).