Public JSON Web Key Set (token verification keys)

GET

/.well-known/jwks.json

const url = 'https://api.aerandil.com/.well-known/jwks.json';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://api.aerandil.com/.well-known/jwks.json

Publish the Ed25519 (EdDSA / OKP) public keys used to verify the bearer tokens /oauth/token issues (RFC 7517).

Public — no authentication. Consumers cache the set and refetch only on an unknown kid; the short max-age keeps a rotated-out key from lingering in caches past the rotation grace window.

Responses

200

The active verification keys as a JWKS.

application/json

object

keys

required

Array<object>

object

Example^generated

{
  "keys": [
    {}
  ]
}

Headers

Cache-Control

string

public, max-age=300, must-revalidate.

Public JSON Web Key Set (token verification keys)

Responses

200

Examplegenerated

Headers

Example^generated