---
title: "List public keys used to sign JWTs."
method: GET
path: "/v1/auth/jwks"
tags: ["OAuth2"]
---

# List public keys used to sign JWTs.

`GET /v1/auth/jwks`

JSON Web Key Set ([RFC 7517](https://www.rfc-editor.org/rfc/rfc7517))
endpoint. Returns the public keys that should be used to validate
the signature of JWTs issued by this GitGuardian instance, including
OIDC `id_token`s.

This endpoint is unauthenticated and aggressively cached.

## Response `200`

JSON Web Key Set.

- object
  - `keys` object[], required
    - `kid` string, required — Key identifier.
    - `n` string, required — RSA modulus, base64url-encoded.
    - `e` string, required — RSA exponent, base64url-encoded.
    - `kty` 'RSA', required
    - `alg` 'RS256', required
    - `use` 'sig', required

## Other responses

- `500` — No signing keys are configured on this instance.

---

[API](https://skmtc.net/gitguardian/apis/gitguardian-api.md) · [All operations](https://skmtc.net/gitguardian/apis/gitguardian-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gitguardian/gitguardian-api/revisions/511b067cdcb1/schema)