JWKS - JSON Web Key Set

You are not obliged to validate authentication tokens, we will do this automatically when they are used in an API call. However, if you want to rely on our authentication method for other purposes (for example, to allow users access to other parts of your application), we provide the means for you to do so. To validate a token that we have provided, you can do so via the below endpoint:

For Sandbox: https://weavr-cdn.s3.eu-central-1.amazonaws.com/public-key-sandbox.json

For Production: https://weavr-cdn.s3.eu-central-1.amazonaws.com/public-key-production.json

The JWKS endpoint is signed with ES256 algorithm that generates an asymmetric signature and contains the JWK that can be used to verify all Weavr-issued JWTs.

JWKS is a ubiquitous solution which most leading web frameworks support. The following are configuration examples for Spring and Micronaut.