---
title: "List Trusted OAuth2 JWT Bearer Grant Type Issuers"
method: GET
path: "/admin/trust/grants/jwt-bearer/issuers"
tags: ["oAuth2"]
---

# List Trusted OAuth2 JWT Bearer Grant Type Issuers

`GET /admin/trust/grants/jwt-bearer/issuers`

Use this endpoint to list all trusted JWT Bearer Grant Type Issuers.

## Query parameters

- `page_size` integer
- `page_token` string
- `issuer` string

## Response `200`

trustedOAuth2JwtGrantIssuers

- TrustedOAuth2JwtGrantIssuer[] — OAuth2 JWT Bearer Grant Type Issuer Trust Relationships
  - `allow_any_subject` boolean — The "allow_any_subject" indicates that the issuer is allowed to have any principal as the subject of the JWT.
  - `created_at` string, date-time — The "created_at" indicates, when grant was created.
  - `expires_at` string, date-time — The "expires_at" indicates, when grant will expire, so we will reject assertion from "issuer" targeting "subject".
  - `id` string
  - `issuer` string — The "issuer" identifies the principal that issued the JWT assertion (same as "iss" claim in JWT).
  - `public_key` TrustedOAuth2JwtGrantJsonWebKey — OAuth2 JWT Bearer Grant Type Issuer Trusted JSON Web Key
    - `kid` string — The "key_id" is key unique identifier (same as kid header in jws/jwt).
    - `set` string — The "set" is basically a name for a group(set) of keys. Will be the same as "issuer" in grant.
  - `scope` string[] — The "scope" contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])
  - `subject` string — The "subject" identifies the principal that is the subject of the JWT.

## Other responses

- `default` — genericError

---

[API](https://skmtc.net/ory/apis/ory-hydra.md) · [All operations](https://skmtc.net/ory/apis/ory-hydra/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ory/ory-hydra/versions/a302a90a0e8a/schema)