[ARCHIVED] JWKS Format

[jrpburgos]

JWKS Format

What is the format of the output from a well-known JWKS url?  I am trying to configure an external tool in the Developer Key. And the tool's JWKS url is returning a standard format for the JSON Web Keyset, i.e.

{
   "keys": [
   {
       "kid": "PKOegFlbTOO7tlr2UQpcO7R3xEFysVPkoA6WjF-l5To",
       "kty": "RSA",
       "e": "AQAB",
        "n": "1Yh9NPQdVKgDwEN8jtlXq-1RhfqhKZ9qQAQTPrmrEJRJvzoHqPPi8W5Jh8-_fGX6rEzmttWdcTGU-dJCEUlXvnC2YXypf4HyQ9o2iEWBfYNWeBum6ti0Vuttetpszc9uwcE4z9wJXz7ejMqunn_PvJLmp7m9Ccap9gHNgB1Kr0wMIzYIApsMdmvcKSwdMoxWGTWgMDlHtbO8ea3FPW4W0kZPyv-WvngoxD5YIvfxo5_3vAVRRLSY--gUQ0WJ6yg8aKcdwF-mqVJgVAPvP6_xubpmf0dGCwzv0nhOF6OjpDQKRYRbzg_uU7ZWnRwBg6SslzdNBTZlnn_qCDYzI4_xBQ",
        "alg": "RS256",
        "use": "sig"
     }
  ]
}

The above keyset is ending with a JWK invalid signature. But if I take just that one key and paste it in as a Public JWK it works. So, what is the supported format?

[Renee_Carney]

 @jrpburgos  

These can be difficult to troubleshoot.  We'll share with the Canvas Developers‌ group in hopes that someone can help you with that process.

[matthew_buckett]

I've been successfully configuring LTI 1.3 tools using JWKs URL field, here's an example that's worked for me:

https://lti.canvas.ox.ac.uk/.well-known/jwks.json 

[dov_kruger]

Your question shows you are further along than us. Can you clarify how you generate a JWK in the first place?
We set up a local canvas so we have control and don't have to ask admins at school to do things. On the local canvas we can add a developer key. The key asks for a JWK and it is completely unclear how to generate it.

"kty":"RSA",
"kid":"...",
"use":"sig",
"alg":"RSA256",
"n":"u6gqiV...",
"e":"AQAB"

we guessed that use was "sig" (or is it "enc"?)
we were going to make up a kid, how do you get one?
we had the same "e" "AQAB" which makes me think we are doing something wrong, the encrypt password ought to be different at random for each user?
What tool do you use to generate the key and convert to JWK?