Auth
Read the public keys of Plotwork's issuer for the Azure DevOps connector
The RS256 public keys Entra checks the connector's client assertions against.
GET
/connectors/oidc/jwks.jsonTL;DR
| Question | Answer |
|---|---|
| What does it do? | Read the public keys of Plotwork's issuer for the Azure DevOps connector. |
| What does it take? | Nothing. |
| What does it return? | Status 200 with a body of type ConnectorJwks. |
| What can go wrong? | 429 too many requests; 503 this server has no HTTPS API_URL (azure_devops.not_configured), or no database (accounts.unavailable). Every failure uses the one error envelope. |
What it does
The RS256 public keys Entra checks the connector's client assertions against. Public members only; empty before the first assertion. Public, cacheable for five minutes.
Responses
| Status | Meaning | Body |
|---|---|---|
| 200 | The public keys. | ConnectorJwks |
| 429 | Too many requests. | ErrorResponse |
| 503 | This server has no HTTPS API_URL (azure_devops.not_configured), or no database (accounts.unavailable). | ErrorResponse |
Response body
A 200 answer has the type ConnectorJwks.
| Field | Type | Required | Description |
|---|---|---|---|
keys | object[] | yes | |
keys[].kty | "RSA" | yes | |
keys[].n | string | yes | The modulus, base64url. |
keys[].e | string | yes | The public exponent, base64url. |
keys[].kid | string | yes | The key id: the key's RFC 7638 thumbprint. |
keys[].alg | "RS256" | yes | |
keys[].use | "sig" | yes |
See also
| Doc | Why |
|---|---|
| API reference | Every endpoint, and the error envelope |
| Schemas | Every request and response type |
| Tool reference | The operations as callable tools |