---
title: "OAuth2 Provider JWKS Endpoint"
method: GET
path: "/oauth2/jwks"
tags: ["system"]
---

# OAuth2 Provider JWKS Endpoint

`GET /oauth2/jwks`

Returns the JSON Web Key Set containing public keys used for OAuth2/OIDC token signing.

## Response `200`

JWKS response

- OAuth2JWKSResponse
  - `keys` JWK[], required
    - `alg` string, required — Algorithm used with this key
    - `e` string, required — RSA public exponent
    - `kid` string, required — Key ID
    - `kty` string, required — Key type
    - `n` string, required — RSA modulus
    - `use` string, required — Key usage

## Other responses

- `default` — Error

## Changes

- **2026-02-19** `50e643cc3991` — 1 info
  - endpoint added
- **2025-10-09** `2bb5c4e40463` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/nhost/apis/nhost-authentication-api/changes/oauth2/jwks/get.md)

---

[API](https://skmtc.dev/nhost/apis/nhost-authentication-api.md) · [All operations](https://skmtc.dev/nhost/apis/nhost-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/nhost/nhost-authentication-api/revisions/a5c0d88b55c4/schema)