> For the complete documentation index, see [llms.txt](/docs/llms.txt)

# JWTs & Refresh Token API | FusionAuth Docs

Learn about the APIs that allow you to manage Refresh Tokens, verify Access Tokens and retrieve public keys used for verifying JWT signatures.

# JWTs & Refresh Token API

JSON Web Tokens (JWTs) are portable identity tokens. A JWT is issued after completing a [Login](/docs/apis/login/authenticate) request and is used to identify a user. JWTs can be used to call various FusionAuth APIs or they can be used to authenticate and authorize your APIs. In this document the term JWT and access token are used interchangeably.

Here's a presentation discussing how to use JWTs in a microservices architecture:

[Play](https://youtube.com/watch?v=SLc3cTlypwM)

Use the following APIs to manage JWTs:

| Operation | Method | Endpoint |
| --- | --- | --- |
| [Issue a JWT](/docs/apis/jwt/issue-a-jwt) | `GET` | `/api/jwt/issue?applicationId={applicationId}&refreshToken={refreshToken}` |
| [Reconcile a JWT Using the External JWT Provider](/docs/apis/jwt/reconcile-a-jwt-using-the-external-jwt-provider) | `POST` | `/api/jwt/reconcile` |
| [Retrieve Public Keys](/docs/apis/jwt/retrieve-public-keys) | `GET` | `/api/jwt/public-key`  
`/api/jwt/public-key?applicationId={applicationId}`  
`/api/jwt/public-key?kid={kid}` |
| [Refresh a JWT](/docs/apis/jwt/refresh-a-jwt) | `POST` | `/api/jwt/refresh` |
| [Retrieve Refresh Tokens](/docs/apis/jwt/retrieve-refresh-tokens) | `GET` | `/api/jwt/refresh/{tokenId}`  
`/api/jwt/refresh?userId={userId}` |
| [Revoke Refresh Tokens](/docs/apis/jwt/revoke-refresh-tokens) | `DELETE` | `/api/jwt/refresh?applicationId={applicationId}`  
`/api/jwt/refresh?userId={userId}`  
`/api/jwt/refresh?applicationId={applicationId}&userId={userId}`  
`/api/jwt/refresh/{tokenId}`  
`/api/jwt/refresh?token={token}` |
| [Validate a JWT](/docs/apis/jwt/validate-a-jwt) | `GET` | `/api/jwt/validate` |
| [Vend a JWT](/docs/apis/jwt/vend-a-jwt) | `POST` | `/api/jwt/vend` |