Get the public signing keys

GET

/v1/.well-known/jwks.json

curl --request GET \
  --url https://app.mondochat.io/v1/.well-known/jwks.json

Returns the public keys, as a JSON Web Key Set, that verify session tokens and guest tokens. Match a token’s kid header to a key. During a key rotation the set holds two keys. The answer is cacheable for 5 minutes. No credential.

Responses

200

Successful Response

Media typeapplication/json

Response Jwks

object

key

additional properties

Array<object>

object

key

additional properties

any

Example ^generated

{
  "additionalProperty": [
    {}
  ]
}

4XX

Problem

Media typeapplication/problem+json

An RFC 9457 problem: the body of every error answer.

object

code

required

The stable error code to branch on, such as policy_denied.

string

detail

What went wrong this time, when there is more to say.

string | null

errors

For validation, one entry per invalid field.

Array<object>

One invalid field.

object

loc

The path to the field.

array

msg

What is wrong with it.

string

instance

The path of the request.

string

reason

For policy_denied and limit_reached, the rule or limit that refused the request; for forbidden, a short cause such as you_blocked; for banned, temporary when the ban expires.

string

status

required

The HTTP status code.

integer

title

required

A short summary of the problem.

string

type

required

A URL that names the problem, https://app.mondochat.io/problems/<code>.

string

Example

{
  "code": "policy_denied",
  "detail": null,
  "instance": "/v1/conversations/0199d6a0-2000-7000-8000-000000000001",
  "reason": "pins",
  "status": 403,
  "title": "Policy denied",
  "type": "https://app.mondochat.io/problems/policy_denied"
}