🤖 For AI agents: The complete documentation index is available at /docs/llms.txt. A markdown version of this page is available at /docs/apis/jwt/index.md.
JSON Web Tokens (JWTs) are portable identity tokens. A JWT is issued after completing a Login request and is used to identify a user. JWTs can be used to call various FusionAuth APIs or they can be used to authenticate and authorize your APIs. In this document the term JWT and access token are used interchangeably.
Here's a presentation discussing how to use JWTs in a microservices architecture:
Use the following APIs to manage JWTs:
| Operation | Method | Endpoint |
|---|---|---|
| Issue a JWT | GET | /api/jwt/issue?applicationId={applicationId}&refreshToken={refreshToken} |
| Reconcile a JWT Using the External JWT Provider | POST | /api/jwt/reconcile |
| Retrieve Public Keys | GET | /api/jwt/public-key/api/jwt/public-key?applicationId={applicationId}/api/jwt/public-key?kid={kid} |
| Refresh a JWT | POST | /api/jwt/refresh |
| Retrieve Refresh Tokens | GET | /api/jwt/refresh/{tokenId}/api/jwt/refresh?userId={userId} |
| Revoke Refresh Tokens | DELETE | /api/jwt/refresh?applicationId={applicationId}/api/jwt/refresh?userId={userId}/api/jwt/refresh?applicationId={applicationId}&userId={userId}/api/jwt/refresh/{tokenId}/api/jwt/refresh?token={token} |
| Validate a JWT | GET | /api/jwt/validate |
| Vend a JWT | POST | /api/jwt/vend |