2 min read
Definition
A JSON Web Key Set is a document of public keys, each with a key ID (kid). To verify an access-token JWT locally, select the key by the token's kid and check the signature. Keys rotate, so a fresh kid means re-fetch the set.
In plain terms
The public keys that let you check a token is genuine, without asking the server.
Why it matters here
Served at /partner/v1/oauth/jwks. See verifying a token locally.
Related reading
Access token
An access token is the short-lived bearer JWT you send as Authorization: Bearer on partner calls. You mint it…
Read →
Token introspection
Token introspection asks the authorization server whether a token is active and returns its scopes and…
Read →
Client-credentials grant
The client-credentials grant is the OAuth 2.0 machine-to-machine flow: a server exchanges a client ID and…
Read →Funding for UK limited companies
Credicorp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.