Netlify Identity public key (JWKS)

[tytakoff]

Hi,

We need to verify authenticity of a JWT token issued by Netlify Identity on our servers. However, to do that we need the public key which corresponds to the private key that was used for signing the JWT token in question.

Netlify Identity and the GoTrue framework doesn’t seem to provide any information on how to retrieve the public key. I tried the following endpoints:

• https://identity.netlify.com/.well-known/jwks.json
• https://identity.netlify.com/v1/.well-known/jwks.json
• https://<MY_NETLIFY_WEBSITE>/.netlify/identity/.well-known/jwks.json
  None of the above endpoints returns Netlify Identity public key.

So again, how can we verify authenticity of a JWT token issued by Netlify Identity on our servers?

Thank you

[hrishikesh]

The public key is not accessible. On Business plan, I believe you can set a custom JWT secret for such use cases.