List a client's signing keys
The key ids a client's tokens are signed with.
GET /organizations/{org}/clients/{clientId}/keypairs
Returns the kid of each signing key the client has. The public keys themselves are served by the JWKS endpoint; private keys are never returned.
Authorization
Any member of the org. A non-member gets 404, the same as for an org that does not exist.
Path parameters
| Name | Type | Description |
|---|---|---|
org | string | The organization: its id (org_…) or its slug. It has to be an org your token can manage (see Who can call it) |
clientId | string | The client, cli_… |
Response
200 OK
[
{ "kid": "…" }
]Errors
| Status | error | When |
|---|---|---|
404 | not_found | No such client in this org, or the org is not yours |
Example
curl https://loginwith.loginwith.dev/organizations/acme/clients/cli_65f1c2a9e4b0d3f7a1c8e902/keypairs \
-H "Authorization: Bearer $TOKEN"