List signing keys

GET/.well-known/varis-signing-keys

The public keys that verify the signature on requests Varis sends to your endpoint. Use the key whose kid matches the request's X-Varis-Key-Id header.

Needs no credential.

Response

application/json

The current signing keys.

keysobject[]required

Every key that may sign a request. Match on kid.

kidstringrequired

The key ID. A signed request names it in X-Varis-Key-Id.

algenum<string>required

The signature algorithm.

Available options: Ed25519

useenum<string>required

What the key is for. Always sig, for verifying signatures.

Available options: sig

public_key_pemstringrequired

The public key, as an SPKI PEM.

curl -X GET 'https://api.usevaris.com/.well-known/varis-signing-keys'

{  "keys": [    {      "kid": "string",      "alg": "Ed25519",      "use": "sig",      "public_key_pem": "string"    }  ]}