---
title: "Get one global JWT verifiers"
method: GET
path: "/api/verifiers/{verifierId}"
tags: ["jwt-verifiers"]
---

# Get one global JWT verifiers

`GET /api/verifiers/{verifierId}`

Get one global JWT verifiers

## Path parameters

- `verifierId` string, required

## Response `200`

Successful operation

- GlobalJwtVerifier — A JWT verifier used by multiple service descriptor
  - `algoSettings` union, required
    - HSAlgoSettings — Settings for an HMAC + SHA signing algorithm
      - `secret` string, required — The secret value for the HMAC function
      - `size` integer, required — Size for SHA function. can be 256, 384 or 512
      - `type` string, required — String with value HSAlgoSettings
    - RSAlgoSettings — Settings for an HMAC + SHA signing algorithm
      - `privateKey` string — The private key for the RSA function
      - `publicKey` string, required — The public key for the RSA function
      - `size` integer, required — Size for SHA function. can be 256, 384 or 512
      - `type` string, required — String with value RSAlgoSettings
    - ESAlgoSettings — Settings for an EC + SHA signing algorithm
      - `privateKey` string — The private key for the RSA function
      - `publicKey` string, required — The public key for the RSA function
      - `size` integer, required — Size for SHA function. can be 256, 384 or 512
      - `type` string, required — String with value ESAlgoSettings
    - JWKSAlgoSettings — Settings for a JWK set
      - `headers` object — The headers for the http call
      - `kty` string — The type of key: RSA or EC
      - `timeout` integer — The timeout of the http call
      - `ttl` integer — The ttl of the keyset
      - `type` string, required — String with value JWKSAlgoSettings
      - `url` string — The url for the http call
  - `desc` string, required — Verifier description
  - `enabled` boolean, required — Is it enabled
  - `id` string, required — Verifier id
  - `name` string, required — Verifier name
  - `source` union, required
    - InQueryParam — JWT location in a query param
      - `name` string, required — Name of the query param
      - `type` string, required — String with value InQueryParam
    - InHeader — JWT location in a header
      - `name` string, required — Name of the header
      - `remove` string, required — Remove regex inside the value, like 'Bearer '
      - `type` string, required — String with value InHeader
    - InCookie — JWT location in a cookie
      - `name` string, required — Name of the cookie
      - `type` string, required — String with value InCookie
  - `strategy` union, required
    - PassThrough — Strategy where only signature and field values are verified
      - `type` string, required — String with value PassThrough
      - `verificationSettings` VerificationSettings, required — Settings to verify the value of JWT token fields
        - `fields` object, required — Fields to verify with their values
        - `mappingSettings` MappingSettings — Settings to change fields of a JWT token
          - `map` object, required — Fields to rename
          - `remove` string[], required — Fields to remove
          - `values` object, required — Fields to set
    - Sign — Strategy where signature and field values are verified, and then token si re-signed
      - `algoSettings` union, required
        - HSAlgoSettings — Settings for an HMAC + SHA signing algorithm
          - `secret` string, required — The secret value for the HMAC function
          - `size` integer, required — Size for SHA function. can be 256, 384 or 512
          - `type` string, required — String with value HSAlgoSettings
        - RSAlgoSettings — Settings for an HMAC + SHA signing algorithm
          - `privateKey` string — The private key for the RSA function
          - `publicKey` string, required — The public key for the RSA function
          - `size` integer, required — Size for SHA function. can be 256, 384 or 512
          - `type` string, required — String with value RSAlgoSettings
        - ESAlgoSettings — Settings for an EC + SHA signing algorithm
          - `privateKey` string — The private key for the RSA function
          - `publicKey` string, required — The public key for the RSA function
          - `size` integer, required — Size for SHA function. can be 256, 384 or 512
          - `type` string, required — String with value ESAlgoSettings
        - JWKSAlgoSettings — Settings for a JWK set
          - `headers` object — The headers for the http call
          - `kty` string — The type of key: RSA or EC
          - `timeout` integer — The timeout of the http call
          - `ttl` integer — The ttl of the keyset
          - `type` string, required — String with value JWKSAlgoSettings
          - `url` string — The url for the http call
      - `type` string, required — String with value Sign
      - `verificationSettings` VerificationSettings, required — Settings to verify the value of JWT token fields
        - `fields` object, required — Fields to verify with their values
        - `mappingSettings` MappingSettings — Settings to change fields of a JWT token
          - `map` object, required — Fields to rename
          - `remove` string[], required — Fields to remove
          - `values` object, required — Fields to set
    - Transform — Strategy where signature and field values are verified, trasnformed and then token si re-signed
      - `algoSettings` union, required
        - HSAlgoSettings — Settings for an HMAC + SHA signing algorithm
          - `secret` string, required — The secret value for the HMAC function
          - `size` integer, required — Size for SHA function. can be 256, 384 or 512
          - `type` string, required — String with value HSAlgoSettings
        - RSAlgoSettings — Settings for an HMAC + SHA signing algorithm
          - `privateKey` string — The private key for the RSA function
          - `publicKey` string, required — The public key for the RSA function
          - `size` integer, required — Size for SHA function. can be 256, 384 or 512
          - `type` string, required — String with value RSAlgoSettings
        - ESAlgoSettings — Settings for an EC + SHA signing algorithm
          - `privateKey` string — The private key for the RSA function
          - `publicKey` string, required — The public key for the RSA function
          - `size` integer, required — Size for SHA function. can be 256, 384 or 512
          - `type` string, required — String with value ESAlgoSettings
        - JWKSAlgoSettings — Settings for a JWK set
          - `headers` object — The headers for the http call
          - `kty` string — The type of key: RSA or EC
          - `timeout` integer — The timeout of the http call
          - `ttl` integer — The ttl of the keyset
          - `type` string, required — String with value JWKSAlgoSettings
          - `url` string — The url for the http call
      - `transformSettings` TransformSettings — Settings to transform a JWT token and its location
        - `location` union, required
          - InQueryParam — JWT location in a query param
            - `name` string, required — Name of the query param
            - `type` string, required — String with value InQueryParam
          - InHeader — JWT location in a header
            - `name` string, required — Name of the header
            - `remove` string, required — Remove regex inside the value, like 'Bearer '
            - `type` string, required — String with value InHeader
          - InCookie — JWT location in a cookie
            - `name` string, required — Name of the cookie
            - `type` string, required — String with value InCookie
        - `mappingSettings` MappingSettings, required — Settings to change fields of a JWT token
          - `map` object, required — Fields to rename
          - `remove` string[], required — Fields to remove
          - `values` object, required — Fields to set
      - `type` string, required — String with value Transform
      - `verificationSettings` VerificationSettings, required — Settings to verify the value of JWT token fields
        - `fields` object, required — Fields to verify with their values
        - `mappingSettings` MappingSettings — Settings to change fields of a JWT token
          - `map` object, required — Fields to rename
          - `remove` string[], required — Fields to remove
          - `values` object, required — Fields to set
  - `strict` boolean, required — Does it fail if JWT not found

## Other responses

- `400` — Bad resource format. Take another look to the swagger, or open an issue :)
- `401` — You have to provide an Api Key. Api Key can be passed with 'Otoroshi-Client-Id' and 'Otoroshi-Client-Secret' headers, or use basic http authentication
- `404` — Resource not found or does not exist

---

[API](https://skmtc.net/maif/apis/otoroshi.md) · [All operations](https://skmtc.net/maif/apis/otoroshi/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/maif/otoroshi/versions/276881687271/schema)
