JWKS Admin — CIAM Test Client

Hosted Client JWKS Management

Manage the public keys served at /{clientId}/jwks.json for use with private_key_jwt client authentication.

➕ Add Public JWK

💡 How to use with CIAM

Configure the client on the CIAM Tenant to use private_key_jwt (SignedJwt) credential type.
Set the client's JWKS URL on CIAM to point to this client's hosted endpoint:
https://localhost:5100/{clientId}/jwks.json (replace port if different).
Add one or more public keys to the client using the form on the left.
When running tests, the OIDC provider will fetch these public keys to validate client assertions signed by your private key.

Configured JWKS Endpoints

openid-test-22 Served at: /openid-test-22/jwks.json

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "openid-test-22",
      "x": "mjqTesJTf2jJkvoKPJv2Hx9720EA6wsjkwH4eblXtVg",
      "y": "JNYsM7JprcPZ4K1UXO0dE0BM78pJz3O_fX0CCYy0FO8",
      "alg": "ES256"
    }
  ]
}

openid-test-1 Served at: /openid-test-1/jwks.json

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "openid-test-1",
      "x": "4yhuqS1DhB2MNqDg46JllXjHGp5PplNaZ_z5TrBDhH0",
      "y": "mTJmqnxrXuGzLRBZhc8HguwS0cIidJhGJt0tk-qw0d0",
      "alg": "ES256"
    }
  ]
}

fc-cleint-one Served at: /fc-cleint-one/jwks.json

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "MqB-rNsGwHmerAYq3D78aCcOfc7VDOv32e-k0VUc_Gg",
      "x": "8wuKWx-RSXvavtPKwM_kZsKrmmgVvA-qiA_E6CygbcE",
      "y": "yxwuVvonFCZtyFOPDPfCWRtEOBcawo2xBD7jvIBbDcI",
      "alg": "ES256"
    }
  ]
}

fc-client-two Served at: /fc-client-two/jwks.json

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "sGsPnxY1jxdsaoAEVg2NoTfCRilez4hCF0qdWi8vYPA",
      "x": "RufuN79RUEfQSsRv80plYTPaAEHCfDopa65gRD4ZqJM",
      "y": "2oN8bN403jqcQffCQjNKLq7qRrp51BmmpD56sWbdWY8",
      "alg": "ES256"
    }
  ]
}