v57

latestOpenAPI 3.1.0Apache-2.0raw.githubusercontent.com2026-08-012143051018.3 KB

Tenant Identity

Retrieve OIDC JWKS for current Org

Public RFC 7517 JSON Web Key Set for JWT-SVID signature verification (use: sig). No authentication required.

NICo currently issues ES256 signatures over P-256 keys. Returns 404 Not Found when no identity configuration exists for this org/site, and 502 Bad Gateway when the Core gRPC API returns a malformed body. See the Tenant Identity tag description for consumer guidance during key rotation.

get/v2/org/{org}/nico/site/{siteID}/.well-known/jwks.json

Response

JWKS document.

Example response

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "alg": "ES256"
    }
  ]
}