v57

latestOpenAPI 3.1.0Apache-2.0raw.githubusercontent.com2026-08-012143051018.3 KB

Tenant Identity

Retrieve SPIFFE JWKS for current Org

SPIFFE trust-domain JWKS — same key material as the OIDC JWKS but with use: jwt-svid for SPIFFE-native verifiers. No authentication required.

Not-configured and malformed-body behavior matches the OIDC JWKS endpoint.

get/v2/org/{org}/nico/site/{siteID}/.well-known/spiffe/jwks.json

SPIFFE JWKS document.

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "alg": "ES256"
    }
  ]
}