---
title: "Verify JOSE"
method: POST
path: "/api/{serviceId}/jose/verify"
tags: ["Jose Object"]
---

# Verify JOSE

`POST /api/{serviceId}/jose/verify`

This API verifies a JOSE object.

## Path parameters

- `serviceId` string, required

## Request body

- JoseVerifyRequest
  - `jose` string, required — A JOSE object.
  - `mandatoryClaims` string[] — Mandatory claims that are required to be included in the JOSE object.
  - `clockSkew` integer — Allowable clock skew in seconds.
  - `clientIdentifier` string — The identifier of the client application whose keys are required for verification of the JOSE object.
  - `signedByClient` boolean — The flag which indicates whether the signature of the JOSE object has been signed by a client application with the client's private key or a shared symmetric key.

## Response `200`

- JoseVerifyResponse
  - `resultCode` string — The code which represents the result of the API call.
  - `resultMessage` string — A short message which explains the result of the API call.
  - `valid` boolean — The result of the verification on the JOSE object.
  - `signatureValid` boolean — The result of the signature verification.
  - `missingClaims` string[] — The list of missing claims.
  - `invalidClaims` string[] — The list of invalid claims.
  - `errorDescriptions` string[] — The list of error messages.

## Other responses

- `400`
- `401`
- `403`
- `429` — The request exceeded the request rate permitted for the endpoint.
- `500`

---

[API](https://skmtc.net/authlete/apis/authlete-api.md) · [All operations](https://skmtc.net/authlete/apis/authlete-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/authlete/authlete-api/versions/7ad74ab64749/schema)