Description

  • The JWKS endpoint includes is a highly recommended endpoint used to confirm the signature of the /token response matches what was expected (eg. ensuring the payload was not modified in transit).
  • ID DataWeb uses RS256 to sign ID tokens, and encourages Relying Party's to verify the signature to ensure the contents are trustworthy.

Endpoints

Setup

  • The JWKS endpoint (discoverable by the /well-known endpoint) provides information on the public key which can be used to verify the ID Token's signature. This is based on the JSON Web Token (JWT) standard.

Usage

Language