Get the JSON Web Key Set used to verify tokens

1 min

GET

https://api.upstartcommerce.com/.well-known/jwks.json

Public keys for verifying access-token signatures. Requires no credentials, sends CORS headers, and is safe to cache — responses carry Cache-Control: max-age=86400. Fetch it once, cache it, and refetch on an unrecognised kid rather than per request.

acceptstringGenerated from available response content types

200The key set currently valid for verification.

500<p>No signing key is available. Only occurs if the service is configured with a symmetric algorithm, which cannot expose a public key.</p>

curl --request GET \
     --url https://api.upstartcommerce.com/.well-known/jwks.json \
     --header 'accept: application/json'