Skip to main content
GET
Get the signing keys
Authentication is new. These endpoints are served by your application’s issuer, such as https://<name>.auth.didit.me, and never take your Didit API key.
Keys rotate every 30 days, with a day of overlap on each side, so a JWKS cached for 5 minutes keeps verifying across a rotation. Fetch it again when a token names a kid you do not have, at most once a minute. See Caching and rotation.

Response

The published keys.

The application's published public signing keys. Usually one key; two around a rotation, when the next key is published a day before it signs and the previous key stays a day after it stops.

keys
object[]
required