JWKS endpoint containing the public keys used by OpenID Connect Relying Party to verify any JWT issued by the authorization server.
A JSON object that represents a set of JWKs
The value of the "keys" parameter is an array of JWK values
The "kty" (key type) parameter identifies the cryptographic algorithm family used with the key, such as "RSA" or "EC"
The "use" (public key use) parameter identifies the intended use of the public key
The "key_ops" (key operations) parameter identifies the operation(s) for which the key is intended to be used
The "alg" (algorithm) parameter identifies the algorithm intended for use with the key
The "kid" (key ID) parameter is used to match a specific key
The "x5u" (X.509 URL) parameter is a URI [RFC3986] that refers to a resource for an X.509 public key certificate or certificate chain [RFC5280]
The "x5c" (X.509 certificate chain) parameter contains a chain of one or more PKIX certificates [RFC5280]
The "x5t" (X.509 certificate SHA-1 thumbprint) parameter is a base64url-encoded SHA-1 thumbprint (a.k.a. digest) of the DER encoding of an X.509 certificate [RFC5280]
The "x5t#S256" (X.509 certificate SHA-256 thumbprint) parameter is a base64url-encoded SHA-256 thumbprint (a.k.a. digest) of the DER encoding of an X.509 certificate [RFC5280]