Get RSA public key for JWT verification
RSA Keys
Get RSA public key for JWT verification
Returns the RSA public key for JWT token verification. This endpoint is PUBLIC and requires no authentication.
Why this endpoint is public:
- Required for JWT verification by client applications
- Follows OAuth2/OIDC standards where JWKS endpoints are public
- Avoids chicken-and-egg problem (clients need keys to verify tokens)
- Only exposes public keys, no sensitive data
The endpoint delegates to the app’s workspace key infrastructure.
GET
Get RSA public key for JWT verification
Path Parameters
App ID
Response
successful
PEM-formatted RSA public key for JWT verification
Example:
"-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMI..."
Unique key identifier for JWT verification (kid header)
Example:
"ws_123_1640995200"
JWT signing algorithm used by this key
Example:
"RS256"
Workspace ID that owns this key
Example:
"ws_123"
When the key was generated
Example:
"2024-01-01T12:00:00Z"