auth

Returns the platform's public JSON Web Key Set (JWKS).

Includes the RSA PS512 key used to sign API-key JWTs (`kid` matches `deriveApiTokenJwtKidFromX509CertificatePem`, SHA-256 hex of UTF-8 JWK `n`+`e`, same as token headers) and the ECC ES256 key for data payloads (`kid` matches `deriveEccPlatformJwksKidFromX509CertificatePem`, SHA-256 hex of UTF-8 JWK `x`+`y`). Relying parties should cache this response for up to 5 minutes (`Cache-Control: public, max-age=300, stale-while-revalidate=60`) and re-fetch only when signature verification fails.

Response is a bare RFC 7517 JWKS: `{ "keys": [...] }`.

GET /auth/.well-known/jwks.json

get/auth/.well-known/jwks.json

Request

  • Base URL: https://api.sandbox.tryspare.ae
  • URL: https://api.sandbox.tryspare.ae/auth/.well-known/jwks.json
  • Auth: none declared

Response

Success response

Example response

{
  "keys": [
    {
      "use": "sig"
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.