Publish the active and retained public verification keys
GET
/.well-known/evidence/jwks.json
const url = 'https://example.com/.well-known/evidence/jwks.json';const options = {method: 'GET'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url https://example.com/.well-known/evidence/jwks.jsonParameters
Section titled “Parameters”Header Parameters
Section titled “Header Parameters”If-None-Match
string
The exact strong entity tag from a prior response.
Responses
Section titled “Responses”Evidence public verification keys
Media typeapplication/jwk-set+json
Evidence public JWKS Version 1
object
keys
required
Array<object>
object
alg
required
string
crv
required
string
kid
required
string
kty
required
string
x
required
string
x5c
Array<string>
y
required
string
Example
{ "keys": [ { "alg": "ES256", "crv": "P-256", "kty": "EC" } ]}Headers
Section titled “Headers”Cache-Control
string
Public metadata may be cached for at most ten minutes.
ETag
string
Strong SHA-256 entity tag over the exact response bytes.
traceparent
string
Effective W3C trace context. One valid inbound traceparent is retained; missing, invalid, or duplicate values are replaced and tracestate is never reflected.
The public key set is unchanged
Headers
Section titled “Headers”Cache-Control
string
Public metadata may be cached for at most ten minutes.
ETag
string
Strong SHA-256 entity tag over the exact response bytes.
traceparent
string
Effective W3C trace context. One valid inbound traceparent is retained; missing, invalid, or duplicate values are replaced and tracestate is never reflected.