Description

• The JWKS endpoint includes is a highly recommended endpoint used to confirm the signature of the /token response matches what was expected (eg. ensuring the payload was not modified in transit).
• ID DataWeb uses RS256 to sign ID tokens, and encourages Relying Party's to verify the signature to ensure the contents are trustworthy.

Endpoints

• Preproduction:
  https://preprod1.iddataweb.com/axn/oauth2/jwks.json
• Preproduction (legacy):
  https://preprod1.iddataweb.com/preprod-axn/axn/oauth2/jwks.json
• Production:
  https://prod2.iddataweb.com/axn/oauth2/jwks.json

Setup

• The JWKS endpoint (discoverable by the /well-known endpoint) provides information on the public key which can be used to verify the ID Token's signature. This is based on the JSON Web Token (JWT) standard.

Usage

• Please refer to The ID Token