{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/JwksResponse",
  "title": "JwksResponse",
  "type": "object",
  "properties": {
    "keys": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "alg": {
            "type": "string",
            "description": "Algorithm.",
            "const": "RS256"
          },
          "kty": {
            "type": "string",
            "description": "Key type.",
            "const": "RSA"
          },
          "use": {
            "type": "string",
            "description": "Key use (signature).",
            "const": "sig"
          },
          "x5c": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "X.509 certificate chain.",
            "example": [
              "MIIDQjCCAiqgAwIBAgIGATz/FuLiMA0GCSqGSIb3DQEBCwUA..."
            ]
          },
          "n": {
            "type": "string",
            "description": "RSA modulus.",
            "example": "0vx7agoebGc...eKnNs"
          },
          "e": {
            "type": "string",
            "description": "RSA exponent.",
            "example": "AQAB"
          },
          "kid": {
            "type": "string",
            "description": "Key ID.",
            "example": "key_01HXYZ123456789ABCDEFGHIJ"
          },
          "x5t#S256": {
            "type": "string",
            "description": "X.509 certificate SHA-256 thumbprint.",
            "example": "ZjQzYjI0OT...NmNjU0"
          }
        },
        "required": [
          "alg",
          "kty",
          "use",
          "x5c",
          "n",
          "e",
          "kid",
          "x5t#S256"
        ]
      },
      "description": "The public keys used for verifying access tokens."
    }
  },
  "required": [
    "keys"
  ]
}