---
title: "Get JSON Web Key Set"
method: POST
path: "/get-jwks"
tags: ["developers"]
---

# Get JSON Web Key Set

`POST /get-jwks`

Get JSON Web Key Set

## Headers

- `Authorization` string
- `AuthorizationOxdId` string

## Request body

- object
  - `op_configuration_endpoint` string, required — The openid configuration endpoint URL. If missing, then `op_host` must be defined.
  - `op_host` string — Deprecated in favor of `op_configuration_endpoint`. It will be removed in future version(s). Provide the URL of OpenID Provider (OP) in this field. If missing, then `op_configuration_endpoint` must be defined.
  - `op_discovery_path` string — Deprecated in favor of `op_configuration_endpoint`. It will be removed in future version(s). Provide path to the OpenID Connect Provider's discovery document in this field. For example, if it is 'https://example.com/.well-known/openid-configuration' then the path is blank. But if it is 'https://example.com/oxauth/.well-known/openid-configuration' then the path is '/oxauth'

## Response `200`

OK

- object
  - `keys` JsonWebKey[], required
    - `kid` string, required
    - `kty` string, required
    - `use` string, required
    - `alg` string, required
    - `crv` string
    - `exp` integer, required
    - `x5c` string[], required
    - `n` string
    - `e` string
    - `x` string
    - `y` string

## Other responses

- `400` — Invalid parameters are provided to endpoint.
- `403` — Forbidden. Invalid access token provided in Authorization header.
- `500` — Internal error occured. Please check oxd-server.log file for details (usually located in /var/log/oxd-server/oxd-server.log).

## Changes

- **2020-04-22** `413442ee9280` — 1 info
  - added the new optional `header` request parameter `AuthorizationOxdId`
- **2020-02-14** `c107fa71b082` — 1 breaking, 3 info
  - added the new required request property `op_configuration_endpoint`
  - the request property `op_host` became optional
  - request property `op_discovery_path` deprecated
  - request property `op_host` deprecated
- **2020-02-13** `5ce3fb45d806` — 5 info
  - added optional request body
  - added the media type `application/json` for the response with the status `200`
  - added the media type `application/json` for the response with the status `400`
  - added the media type `application/json` for the response with the status `403`
  - …1 more
- **2018-11-30** `c28eaefdb285` — 5 breaking, 1 warning
  - removed the request body
  - removed the media type `application/json` for the response with the status `200`
  - removed the media type `application/json` for the response with the status `400`
  - removed the media type `application/json` for the response with the status `403`
  - …2 more

[Change history](https://skmtc.dev/gluufederation/apis/oxd-server/changes/get-jwks/post.md)

---

[API](https://skmtc.dev/gluufederation/apis/oxd-server.md) · [All operations](https://skmtc.dev/gluufederation/apis/oxd-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gluufederation/oxd-server/revisions/33ca9e18c54b/schema)