Get Session JWT Public Key

Get session JWT public key endpoint

Retrieve the public key used to verify session JWTs locally.

Endpoint: /jwt/publicKey Method: GET

Request Body

// No request body required

Success Response (200)

{
    publicKey: string; // Base64 encoded public key
}

Error Response (400)

{
    error: string;
}

Example Usage

// Fetch the public key
const response = await axios.get(apiEndpoint + '/jwt/publicKey');
const publicKey = response.data.publicKey;

// Verify a JWT locally
const decodedToken = jwt.verify(token, Buffer.from(publicKey, 'base64').toString('utf-8'), { algorithms: ['ES256'] });

The public key can be used to verify session JWTs locally without making API calls.

Cache the public key and reuse it for multiple verifications. Only fetch a new key if verification fails.