ID-token public keys (JWKS)
curl --request GET \
--url https://api.tassyir.io/apps/.well-known/jwks.jsonconst options = {method: 'GET'};
fetch('https://api.tassyir.io/apps/.well-known/jwks.json', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"keys": [
{
"kty": "OKP",
"crv": "Ed25519",
"x": "<string>",
"kid": "<string>",
"alg": "EdDSA",
"use": "sig"
}
]
}{
"code": "APPS_KEYS_NOT_CONFIGURED",
"message": "<string>",
"keySet": "id_token",
"requestId": "<string>"
}Authentication
ID-token public keys (JWKS)
Verify the ID token your embedded page receives: pick the key by kid, require alg: EdDSA, iss = https://api.tassyir.io/apps, aud = <your client_id>, and exp/nbf with at most 30 s of clock skew.
GET
/
apps
/
.well-known
/
jwks.json
ID-token public keys (JWKS)
curl --request GET \
--url https://api.tassyir.io/apps/.well-known/jwks.jsonconst options = {method: 'GET'};
fetch('https://api.tassyir.io/apps/.well-known/jwks.json', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"keys": [
{
"kty": "OKP",
"crv": "Ed25519",
"x": "<string>",
"kid": "<string>",
"alg": "EdDSA",
"use": "sig"
}
]
}{
"code": "APPS_KEYS_NOT_CONFIGURED",
"message": "<string>",
"keySet": "id_token",
"requestId": "<string>"
}Response
Every published key, inactive ones included.
Show child attributes
Show child attributes