Auth
Read the public keys of Plotwork's issuer for an organisation's buckets
The RS256 public key of each of the organisation's bucket destinations.
GET
/storage/oidc/{org}/jwks.jsonTL;DR
| Question | Answer |
|---|---|
| What does it do? | Read the public keys of Plotwork's issuer for an organisation's buckets. |
| What does it take? | org in the path. |
| What does it return? | Status 200 with a body of type StorageJwks. |
| What can go wrong? | 400 not an organisation id; 429 too many requests; 503 this server has no API_URL or no database (storage.unavailable). Every failure uses the one error envelope. |
What it does
The RS256 public key of each of the organisation's bucket destinations. Public members only; empty for an organisation with none. Public, cacheable for five minutes.
Path parameters
| Field | Type | Required | Description |
|---|---|---|---|
org | string | yes | The organisation's id. |
Responses
| Status | Meaning | Body |
|---|---|---|
| 200 | The public keys. | StorageJwks |
| 400 | Not an organisation id. | ErrorResponse |
| 429 | Too many requests. | ErrorResponse |
| 503 | This server has no API_URL or no database (storage.unavailable). | ErrorResponse |
Response body
A 200 answer has the type StorageJwks.
| Field | Type | Required | Description |
|---|---|---|---|
keys | object[] | yes | |
keys[].kty | "RSA" | yes | |
keys[].n | string | yes | |
keys[].e | string | yes | |
keys[].kid | string | yes | |
keys[].alg | "RS256" | yes | |
keys[].use | "sig" | yes |
See also
| Doc | Why |
|---|---|
| API reference | Every endpoint, and the error envelope |
| Schemas | Every request and response type |
| Tool reference | The operations as callable tools |