TrieOH
IdentityXAPIAuthn

Get a JWKS

Provides the JSON Web Key Set (JWKS) for verifying JWTs issued by the authentication service. Omit `project_id` for the platform keyset, or pass a project id for that project's keyset. Response is a raw JWKS document (RFC 7517), NOT the fun envelope, and is cached for 2 hours by the server.

GET/.well-known/jwks.json

Provides the JSON Web Key Set (JWKS) for verifying JWTs issued by the authentication service. Omit project_id for the platform keyset, or pass a project id for that project's keyset. Response is a raw JWKS document (RFC 7517), NOT the fun envelope, and is cached for 2 hours by the server.

Query Parameters

project_id?string

Project to scope the operation to. Omit for IdentityX itself.

Response Body

application/json

application/json

application/json

curl -X GET "https://example.com/.well-known/jwks.json"
{
  "keys": [
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "kid": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
    }
  ]
}
{
  "code": 0,
  "message": "string",
  "error": {
    "code": "BAD_REQUEST",
    "message": "string",
    "fields": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "meta": {},
    "debug": {
      "raw_error": "string",
      "stack_trace": "string"
    }
  },
  "timestamp": "2019-08-24T14:15:22Z",
  "module": "IdentityX"
}
{
  "code": 0,
  "message": "string",
  "error": {
    "code": "BAD_REQUEST",
    "message": "string",
    "fields": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "meta": {},
    "debug": {
      "raw_error": "string",
      "stack_trace": "string"
    }
  },
  "timestamp": "2019-08-24T14:15:22Z",
  "module": "IdentityX"
}

Introspect the current identity GET

Returns the identity resolved from the current credential — the actor (subject) plus the credential type used (JWT token or API key). API keys authenticate with their full raw key; the subject carries the key's capability grants.

List your organizations GET

Lists the organizations the authenticated platform-level actor belongs to. Requires a JWT or API key bound to a platform-level (non-project-scoped) actor.