audit
List signature verification keys
Returns the JWKS used to verify a project's batch, manifest and checkpoint signatures: every key that ever signed for the project, current and retired, by kid. Public - no auth required. The keys carry no "alg": signatures are ECDSA P-256/SHA-256 with the ASN.1 DER encoding (see the batch/manifest response's alg field), not the raw R||S encoding a JOSE "ES256" verifier expects. A project with no signed data yet has no keys. The first key of a project, or a key added by a rotation, can take up to 2 minutes to be listed here.
get/audit/.well-known/jwks.json
Request
- Base URLhttps://openapi.indykite.com (the document declares no server; this is the origin it was published from)
- Authnone declared
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Query parameters
project_idstring required
Project (app space) GID
Response
OK
object required
Changes
No recorded changes to this operation across all 1 revision of this API.