Topics tagged with jwks

Jwks doesn't have key to match kid or alg from JWT (client credentials token)

vlad.koshkarov — Invalid Date

The tenant is using the "Default signing key (HS256)" for the access token.

Verification of ID Token using RSA public key

dan — Invalid Date

@gokul-mahajan20

Can you add ----BEGIN to the JWKS certs?

I imported a public key and am not seeing the kid in the jwks endpoint.

dan — Invalid Date

We only publish keys that we can use for signing, so a public key all by itself will not be published via JWKS. If you import the entire key pair, it will be published on the JWKS endpoint.

You can also generate a keypair too.

My JWKS are always empty

dan — Invalid Date

Symmetric keys are not returned on the JWKS endpoint, as they don't have a public key. Per the docs this api:

returns public keys generated by FusionAuth, used to cryptographically verify JWTs using the JSON Web Key format

If you create an RSA or EC key which is an asymmetric key pair - the public key will be returned on the JWKS endpoint. If you don’t have any key pairs configured , it will be empty. Out of the box, you’ll only have one HMAC key which we don’t publish in JWKS.