DUET PlatformDocs
API referenceWebhooksWebhook signing keys

Get the webhook signing keys

available
GET
/webhooks/jwks.json

Returns the Ed25519 public keys, as a JSON Web Key Set (RFC 7517), that verify the v1a= value in X-Duet-Signature. The endpoint needs no authentication. Cache the response for up to 5 minutes, and fetch it again when a v1a= value doesn't verify with a cached key.

Response Body

The current signing keys.

application/json
  1. response
keys*array<>

The keys that sign v1a= today. During a key rotation, the set holds the outgoing and the incoming key.

Example Request
curl -X GET 'https://api.enurgen.com/webhooks/jwks.json'
Example Response200
{  "keys": [    {      "kty": "OKP",      "crv": "Ed25519",      "x": "string",      "kid": "string",      "use": "sig",      "alg": "EdDSA"    }  ]}