Skip to main content
GET
/
.well-known
/
jwks
cURL
curl --request GET \
  --url https://{projectId}.frontendapi.corbado.io/.well-known/jwks \
  --header 'Authorization: Bearer <token>'
{
  "keys": [
    {
      "alg": "RS256",
      "kty": "RSA",
      "use": "<string>",
      "n": "<string>",
      "e": "<string>",
      "kid": "<string>"
    }
  ]
}

Authorizations

​
Authorization
string
header
required

After a user logs in successfully, a session is created and a JWT token is returned. This token represents the user's authenticated session. It must be included in the Authorization header as a Bearer token for all protected endpoints:

Authorization: Bearer <your-token>

The server will validate this token to authorize access.

Response

JWKS successfully retrieved

​
keys
object[]
required