Retrieve OIDC JWKS for current Org
Public RFC 7517 JSON Web Key Set for JWT-SVID signature verification (use: sig). No authentication required.
NICo currently issues ES256 signatures over P-256 keys.
Returns 404 Not Found when no identity configuration exists
for this org/site, and 502 Bad Gateway when the Core gRPC API
returns a malformed body. See the Tenant Identity tag
description for consumer guidance during key rotation.
Path parameters
org
Name of the Org
siteID
ID of the Site
Response
JWKS document.
keys
RFC 7517 JWK members. NICo currently emits only EC keys
(kty: EC, crv: P-256, alg: ES256); the schema is
intentionally open-ended so that future algorithms can be
added without a spec change.
Errors
404
Not Found Error
500
Internal Server Error
502
Bad Gateway Error
503
Service Unavailable Error