Discovery

Get signing keys

Get signing keys. Returns JSON unless otherwise noted.

Authentication

Authorizationnot required

This endpoint is public and takes no access token.

Responses

200Successful response

400The request is invalid

429Rate limit exceeded

const response = await fetch('https://api.ufw.dev/oauth2/v2.0/discovery/keys', {
  method: 'GET',
});

const data = await response.json();

Response200

{
  "keys": [
    {
      "kty": "RSA",
      "n": "0vx7agoebGcQSuu…",
      "e": "AQAB",
      "kid": "2026-05-rsa",
      "alg": "RS256",
      "use": "sig"
    }
  ]
}