Skip to content
Sudomimus

Fetch the public signing keys for one application's tokens.

GET
/applications/{applicationAnchor}/jwks.json
curl --request GET \
  --url https://session-api.sudomimus.com/applications/example/jwks.json

Returns the public JWK Set for application access and refresh tokens. Select the key whose kid matches the JWT JOSE header. Unknown kid values should trigger one immediate refresh before rejection. The set contains no private key material and at most 32 keys.

Parameters

Section titled “Parameters”

Path Parameters

Section titled “Path Parameters”
applicationAnchor
required
string

Stable public application identifier carried by token aud.

Responses

Section titled “Responses”

200

Section titled “200”

Public JWK Set for the application.

Media typeapplication/json
object
keys
required
Array<object>
<= 32 items
object
kty
required
string
Allowed values: RSA
n
required

Base64url-encoded RSA modulus.

string
e
required

Base64url-encoded RSA public exponent.

string
kid
required

Stable signing-key identifier copied into JWT JOSE headers.

string
use
required
string
Allowed values: sig
alg
required
string
Allowed values: RS256
Example
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "RS256"
    }
  ]
}

Headers

Section titled “Headers”
Cache-Control
string
/^public, max-age=[0-9]+$/

Public cache lifetime bounded by the signing-key prepublication window.

400

Section titled “400”

The required application anchor path parameter is missing.

Media typeapplication/json

Error response body. A missing, malformed, or structurally invalid JSON request body returns InvalidBody. Documented status-only failures have an empty response body.

object
reason
required
string
message
string
Examplegenerated
{
  "reason": "example",
  "message": "example"
}

404

Section titled “404”

Reason ApplicationNotFound — the application anchor is unknown.

Media typeapplication/json

Error response body. A missing, malformed, or structurally invalid JSON request body returns InvalidBody. Documented status-only failures have an empty response body.

object
reason
required
string
message
string
Examplegenerated
{
  "reason": "example",
  "message": "example"
}

default

Section titled “default”

Error response.

Media typeapplication/json

Error response body. A missing, malformed, or structurally invalid JSON request body returns InvalidBody. Documented status-only failures have an empty response body.

object
reason
required
string
message
string
Examplegenerated
{
  "reason": "example",
  "message": "example"
}