auth

Returns the signing public keys for a specific Open Banking provider.

The tenant header (`X-Tenant`) determines which certificate store is queried. Returns 404 if the provider is unknown or has no certificates.

`Cache-Control: private, max-age=300`, private because the response varies by `X-Tenant` and must not be served from a shared cache to a different tenant. The `Vary: X-Tenant` header is also set for RFC-compliant intermediaries that honour it.

Response is a bare RFC 7517 JWKS: `{ "keys": [...] }`.

GET /auth/.well-known/jwks/:provider

get/auth/.well-known/jwks/{provider}

Request

  • Base URL: https://api.sandbox.tryspare.ae
  • URL: https://api.sandbox.tryspare.ae/auth/.well-known/jwks/{provider}
  • Auth: none declared. Required headers: x-tenant

Path parameters

providerstring required

Bank provider code or ID, from the providers list.

Headers

x-tenantstring required
Example:UAE

Regulatory jurisdiction the request routes to (e.g. UAE, KSA, MAIN). Match it to the market you're integrating.

Response

Success response

Example response

{
  "keys": [
    {
      "use": "sig"
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.