> For the complete documentation index, see [llms.txt](https://docs.defguard.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.defguard.net/2.1/for-developers/rest-api/core/oauth2/get-the-json-web-key-set-used-to-verify-id-token-signatures.md).

# Get the JSON Web Key Set used to verify ID token signatures

```json
{"openapi":"3.1.0","info":{"title":"defguard Core API","version":"2.1.0"},"tags":[{"name":"OAuth2","description":"defguard acting as an OAuth2 / OpenID Connect provider for other applications."}],"paths":{"/api/v1/oauth/discovery/keys":{"get":{"tags":["OAuth2"],"summary":"Get the JSON Web Key Set used to verify ID token signatures","operationId":"discovery_keys","responses":{"200":{"description":"JSON Web Key Set.","content":{"application/json":{"schema":{"type":"object"}}}},"500":{"description":"Unable to build key set.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiErrorResponse"}}}}}}}},"components":{"schemas":{"ApiErrorResponse":{"type":"object","description":"Body returned with error responses.","required":["msg"],"properties":{"code":{"type":["string","null"],"description":"Machine-readable error code, returned for selected errors."},"msg":{"type":"string","description":"Human-readable error message."}}}}}}
```