workspace

set the key guest JWTs are verified against for this workspace

Changed on

A guest JWT (jwt_guest_) is minted by the embedding customer's own backend and verified against this key: a PEM public key (RS/ES family, HS* refused) or a JWKS URL, at most one. Both empty clears the workspace key; off cloud, verification then falls back to the instance issuer (JWT_EXT_JWKS_URL) if one is set, else no guest JWT is accepted (guest_access_enabled is the on/off switch). Workspace-admin gated. The key is validated before it is stored. Setting a key is refused with a 400 where guests are unavailable (the shared cloud); clearing one always works.

post/w/{workspace}/workspaces/edit_guest_jwt_key

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/w/{workspace}/workspaces/edit_guest_jwt_key
  • Auth: one of:
    • HTTP bearer
    • API key in cookie token

Path parameters

workspacestring required

Request body

public_keystring

A PEM public key (RS or ES family).

jwks_urlstring

A JWKS URL whose keys are fetched and refreshed.

Response

status

Changes