# JWKS endpoint

Documentation owner: product `access`; documentation version: `3.9.1`.
Source: `content/products/access/3.9.1/key-components/modules/oidc/jwks-endpoint.md` at commit `eaf7a020437971baeee95e87eaf963636040ac71`.

```
Example: http://127.0.0.1:8080/oidc/tenant1/.well-known/openid-configuration/jwks
```

The JWKS endpoint publishes the public keys used to verify OIDC token signatures.

When OIDC signing keys are configured through `sign_ref`, the endpoint can publish multiple keys during an overlap period. This allows:

* current tokens to be verified using the active key
* previously issued tokens to continue being verified using the old key
* future keys to be published before they start being used for signing

For configuration details and the signing-key selection rule, see [OIDC signing keys](/products/access/key-components/modules/oidc/signing-keys/).