Skip to content

Fortified IDDocs

JWKS endpoint

Returns the JSON Web Key Set containing the public keys used to verify token signatures.

Example: http://127.0.0.1:8080/oidc/tenant1/.well-known/openid-configuration/jwks

The JWKS endpoint publishes the public keys used to verify OIDC token signatures.

When OIDC signing keys are configured through sign_ref, the endpoint can publish multiple keys during an overlap period. This allows:

  • current tokens to be verified using the active key
  • previously issued tokens to continue being verified using the old key
  • future keys to be published before they start being used for signing

For configuration details and the signing-key selection rule, see OIDC signing keys.