The API reference isn't available right now
This instance couldn't load its API specification. The reference returns as soon as the specification is readable again.
Back to the API reference
No such model
This instance publishes no model under that name. It may have been renamed, or no operation this installation serves uses it.
Back to the API reference
This reference may be out of date
This instance couldn't reach its API specification on the last attempt, so this page shows the copy fetched before that. Anything added or changed since then is missing here, and the reference updates itself as soon as the specification is readable again. Last fetched 2026-10-26 23:26 UTC.
API reference
/
Models
PazeJwksDtoA model the API reference uses in a request or a response. The operation pages link every field typed as this model here.
A JWK Set: the public keys Paze fetches to verify our OAuth assertion and encrypt payloads.
Values
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
Fields
Field
Type
Description keys
required array of PazeJwkDto
array of PazeJwkDto The key entries. One `sig` and one `enc`, both from the environment's single certificate.
nullable Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
Fields of each PazeJwkDto:
Field
Type
Description kty
required string
Key type. Always `RSA`.
nullable Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
use
required string
Intended use: `sig` or `enc`.
nullable Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
alg
required string
Algorithm: `RS256` for the sig entry, `RSA-OAEP-256` for the enc entry.
nullable Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
kid
required string
Key id Paze looks the entry up by.
nullable Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
n
required string
base64url of the RSA modulus.
nullable Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
e
required string
base64url of the RSA exponent.
nullable Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
x5c
required array of string
array of Public certificate chain (base64 DER). Emitted only when a certificate is available.
nullable Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
This body has no documented fields.
This model has no documented fields.
Next steps