---
title: "Refresh a provider's JWKS"
method: PATCH
path: "/iam/v2/identity-providers/{provider_id}/jwks"
tags: ["Jwks (iam/v2)"]
---

# Refresh a provider's JWKS

`PATCH /iam/v2/identity-providers/{provider_id}/jwks`

[![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](#section/Versioning/API-Lifecycle-Policy)

Make a request to refresh the provider's JWKS

## Path parameters

- `provider_id` string, required

## Request body

- IamV2Jwks — `JWKS` objects represent public key sets for a specific OAuth/OpenID Connect provider within Confluent Cloud. The API allows you to refresh JWKS public key data. Related guide: [OAuth for Confluent Cloud](https://docs.confluent.io/cloud/current/access-management/authenticate/oauth/overview.html). ## The Jwks Model <SchemaDefinition schemaRef="#/components/schemas/iam.v2.Jwks" />
  - `api_version` 'iam/v2' — APIVersion defines the schema version of this representation of a resource.
  - `kind` 'Jwks' — Kind defines the object this REST resource represents.
  - `spec` IamV2JwksSpec — The desired state of the Jwks
    - `jwks_status` string — The desired state of the public key data
  - `status` IamV2JwksStatus — The status of the Jwks
    - `jwks_status` string — The actual state of the public key data
    - `jwks_last_refresh_at` string, date-time — The last successful refresh time for the public key data

## Response `200`

Jwks.

- object — `JWKS` objects represent public key sets for a specific OAuth/OpenID Connect provider within Confluent Cloud. The API allows you to refresh JWKS public key data. Related guide: [OAuth for Confluent Cloud](https://docs.confluent.io/cloud/current/access-management/authenticate/oauth/overview.html). ## The Jwks Model <SchemaDefinition schemaRef="#/components/schemas/iam.v2.Jwks" />
  - `api_version` 'iam/v2', required — APIVersion defines the schema version of this representation of a resource.
  - `kind` 'Jwks', required — Kind defines the object this REST resource represents.
  - `spec` object, required — The desired state of the Jwks
    - `jwks_status` string, required — The desired state of the public key data
  - `status` IamV2JwksStatus — The status of the Jwks
    - `jwks_status` string — The actual state of the public key data
    - `jwks_last_refresh_at` string, date-time — The last successful refresh time for the public key data

## Other responses

- `400` — Bad Request
- `401` — The request lacks valid authentication credentials for this resource.
- `403` — The access credentials were considered insufficient to grant access
- `404` — Not Found
- `409` — The request is in conflict with the current server state
- `422` — Validation Failed
- `429` — Rate Limit Exceeded
- `500` — Oops, something went wrong!

---

[API](https://skmtc.dev/confluent/apis/confluent-cloud-apis.md) · [All operations](https://skmtc.dev/confluent/apis/confluent-cloud-apis/llms.txt) · [OpenAPI document](https://skmtc.dev/confluent/apis/confluent-cloud-apis/revisions/83f5e4fbfe08?raw)