License Jwks

GET 
/v1/license/jwks/:group_slug/:plugin_slug.json

Public JWKS for a plugin's group — lets offline verifiers fetch the key.

Unauthenticated and verification-only: it exposes only public keys (active + retired, so tokens issued before a rotation still verify). The group_slug + plugin_slug pair uniquely identifies the tenant's signing keys (plugin slugs are only unique within a group). The JWT kid disambiguates the exact key, so a verifier ignores any keys it does not recognise.

Request

Responses

200

Successful Response

422

Validation Error