# PazeJwksDto

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

A JWK Set: the public keys Paze fetches to verify our OAuth assertion and encrypt payloads.

## Fields
- `keys` (array<[PazeJwkDto](https://devportal.demo.winkpg.io/docs/api/models/PazeJwkDto.md)>): The key entries. One `sig` and one `enc`, both from the environment's single certificate. (nullable)
  Fields of each item:
  - `kty` (string): Key type. Always `RSA`. (nullable)
  - `use` (string): Intended use: `sig` or `enc`. (nullable)
  - `alg` (string): Algorithm: `RS256` for the sig entry, `RSA-OAEP-256` for the enc entry. (nullable)
  - `kid` (string): Key id Paze looks the entry up by. (nullable)
  - `n` (string): base64url of the RSA modulus. (nullable)
  - `e` (string): base64url of the RSA exponent. (nullable)
  - `x5c` (array<string>): Public certificate chain (base64 DER). Emitted only when a certificate is available. (nullable)

## See also

- [All documentation](https://devportal.demo.winkpg.io/llms.txt): the machine-readable index of every public page on this site.