Skip to main content

Get credential issuer’s JSON Web Key Set (JWKS)

You can use this public endpoint for GOV.UK One Login to retrieve the credential issuer’s JSON Web Key Set (JWKS) of public keys to verify the pre-authorised code.

/.well-known/jwks.json

get

A public endpoint that returns the service’s public keys in JSON Web Key Set (JWKS) format. These keys are used to verify the signature of JWTs issued by the service.

Responses

StatusDescriptionSchema
200

Credential issuer’s JWKS.

application/json

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "5dcbee863b5d7cc30c9ba1f7393dacc6c16610782e4b6a191f94a7e8b1e1510f",
      "x": "6jCKX_QRrmTeEJi-uiwcYqu8BgMgl70g2pdAst24MPE",
      "y": "icPzjbSk6apD_SNvQt8NWOPlPeGG4KYU55GfnARryoY",
      "alg": "ES256"
    }
  ]
}
 JwksResponse

Schemas

JwksResponse

NameTypeRequiredDescriptionSchema
keys array true

A set of public keys, each in JSON Web Key (JWK) format.

 Key

Key

NameTypeRequiredDescriptionSchema
kty string true

Key Type. The family of cryptographic algorithms used with the key.
kid string true

Key ID. Unique identifier to match a specific key.
crv string true

Curve. Cryptographic curve used with the key.
x string true

The “x” coordinate for the elliptic curve point.
y string true

The “y” coordinate for the elliptic curve point.
alg string true

Algorithm. The cryptographic algorithm used with the key.
use string true

The intended use of the key.
This page was last reviewed on 8 September 2026. It needs to be reviewed again on 8 March 2027 by the page owner #di-mobile-wallet-tech-docs .