---
title: "Get Trusted OAuth2 JWT Bearer Grant Type Issuer"
method: GET
path: "/admin/trust/grants/jwt-bearer/issuers/{id}"
tags: ["oAuth2"]
---

# Get Trusted OAuth2 JWT Bearer Grant Type Issuer

`GET /admin/trust/grants/jwt-bearer/issuers/{id}`

## Request

- Base URL: `/` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/admin/trust/grants/jwt-bearer/issuers/{id}`
- Auth: none declared

Use this endpoint to get a trusted JWT Bearer Grant Type Issuer. The ID is the one returned when you
created the trust relationship.

## Path parameters

- `id` string, required

## Response `200`

trustedOAuth2JwtGrantIssuer

- TrustedOAuth2JwtGrantIssuer: OAuth2 JWT Bearer Grant Type Issuer Trust Relationship
  - `allow_any_subject` boolean: The "allow_any_subject" indicates that the issuer is allowed to have any principal as the subject of the JWT.
  - `created_at` string, date-time: The "created_at" indicates, when grant was created.
  - `expires_at` string, date-time: The "expires_at" indicates, when grant will expire, so we will reject assertion from "issuer" targeting "subject".
  - `id` string
  - `issuer` string: The "issuer" identifies the principal that issued the JWT assertion (same as "iss" claim in JWT).
  - `public_key` TrustedOAuth2JwtGrantJsonWebKey: OAuth2 JWT Bearer Grant Type Issuer Trusted JSON Web Key
    - `kid` string: The "key_id" is key unique identifier (same as kid header in jws/jwt).
    - `set` string: The "set" is basically a name for a group(set) of keys. Will be the same as "issuer" in grant.
  - `scope` string[]: The "scope" contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])
  - `subject` string: The "subject" identifies the principal that is the subject of the JWT.

## Other responses

- `default`: genericError

## Changes

- **2022-10-11** `cec56a3dc789`: 3 info
  - api operation id `adminGetTrustedOAuth2JwtGrantIssuer` removed and replaced with `getTrustedOAuth2JwtGrantIssuer`
  - api tag `oAuth2` added
  - api tag `v0alpha2` removed
- **2022-09-07** `88502aa29515`: 1 info
  - endpoint added
- **2022-09-07** `37cdf14a14a3`: 1 breaking
  - api path removed without deprecation
- **2022-09-07** `92cf8ecd8020`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/ory/apis/ory-hydra/changes/admin/trust/grants/jwt-bearer/issuers/:id/get.md)

---

[API](https://skmtc.dev/ory/apis/ory-hydra.md) - [All operations](https://skmtc.dev/ory/apis/ory-hydra/llms.txt) - [OpenAPI document](https://skmtc.dev/ory/apis/ory-hydra/revisions/a302a90a0e8a?raw)