Represents a JSON Web Key (JWK) as defined by RFC 7517.
A JWK describes a cryptographic key used to verify or encrypt JSON Web Tokens (JWTs) as obtained from the JWKS (JSON Web Key Set) endpoint exposed by the authorization server.
The available properties depend on the key type (kty).
optionalalg:string
Intended algorithm for the key (for example: RS256).
optionalcrv:string
Elliptic curve name (for example: P-256).
optionald:string
RSA private exponent.
optionaldp:string
RSA first factor CRT exponent.
optionaldq:string
RSA second factor CRT exponent.
optionale:string
RSA public exponent.
optionalext:boolean
Indicates whether the key is extractable.
optionalk:string
Symmetric key value (base64url encoded).
optionalkey_ops:string[]
Allowed operations for the key (e.g. sign, verify, encrypt).
optionalkid:string
Key identifier used to match keys during verification.
kty:string
Key type (for example: RSA, or EC).
optionaln:string
RSA modulus.
optionaloth: {d?:string;r?:string;t?:string; }[]
Additional prime information (multi-prime RSA).
| Name | Type |
|---|---|
d? | string |
r? | string |
t? | string |
optionalp:string
RSA first prime factor.
optionalq:string
RSA second prime factor.
optionalqi:string
RSA CRT coefficient.
optionaluse:string
Public key use (sig for signature or enc for encryption).
optionalx:string
X coordinate for EC public keys.
optionalx5c:string[]
X.509 certificate chain.
optionalx5t:string
X.509 certificate SHA-1 thumbprint.
optionalx5t#S256:string
X.509 certificate SHA-256 thumbprint.
optionalx5u:string
URL referencing the X.509 certificate.
optionaly:string
Y coordinate for EC public keys.