> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hopae.com/llms.txt
> Use this file to discover all available pages before exploring further.

# JWKS

> Retrieve the JSON Web Key Set for verifying Hopae-issued ID tokens

Download the JSON Web Key Set (JWKS) to validate ID token signatures or configure your OIDC client library.

## Query Parameters

No query parameters are required.

## Response

<ResponseField name="keys" type="object[]">
  Array of JWK objects containing public keys (`kty`, `kid`, `use`, `e`, `n`).
</ResponseField>

<RequestExample>
  ```bash theme={null}
  curl -X GET https://sandbox.connect.hopae.com/jwks
  ```
</RequestExample>

<ResponseExample>
  ```json Response theme={null}
  {
    "keys": [
      {
        "kty": "RSA",
        "kid": "2024-09-01",
        "use": "sig",
        "alg": "RS256",
        "n": "oahUI3nmdQ1...",
        "e": "AQAB"
      }
    ]
  }
  ```
</ResponseExample>

<Info>
  The `kid` (Key ID) in the JWKS matches the `kid` header of issued ID tokens. When Hopae rotates signing keys, the JWKS is updated with the new key before tokens start referencing it.
</Info>

## Related Resources

<CardGroup cols={2}>
  <Card title="Discovery Document" icon="magnifying-glass" href="/api-reference/oidc/well-known">
    Full issuer metadata via `/.well-known/openid-configuration`
  </Card>

  <Card title="Token" icon="key" href="/api-reference/oidc/token">
    Exchange codes for ID and access tokens
  </Card>
</CardGroup>