---
title: "Jwks Endpoint"
method: GET
path: "/realms/public/protocol/openid-connect/certs"
tags: ["auth-keycloak"]
---

# Jwks Endpoint

`GET /realms/public/protocol/openid-connect/certs`

JWKS endpoint.

We sign with HS256 (symmetric), so there's no public key to expose.
Returning an empty key set satisfies clients that fetch the URL.
Move to RS256 + real JWKS in a later phase if/when needed.

## Response `200`

Successful Response

- unknown

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `422` — Validation Error
- `500` — Internal Server Error

---

[API](https://skmtc.dev/geopera/apis/geopera-data-platform.md) · [All operations](https://skmtc.dev/geopera/apis/geopera-data-platform/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/geopera/geopera-data-platform/revisions/cb0130b2a40a/schema)