JWKS
Generated by scripts/gen-format-pages.py from docs/data/format-metadata/, FILE_FORMATS.csv and docs/formats-master.csv. Do not edit by hand: change the source, then run the script.
JWKS Preview.
At a glance
| Purpose | A JSON Web Key Set: a JSON list of public keys (RSA, EC, OKP or symmetric) with their IDs and intended use. |
| Extensions | .jwks |
| Poka parser | poka-jwks |
| Viewer | poka-table-viewer |
| Depth tier | Parser with a shared viewer (see Depth tiers) |
| Breadth tier | B2 Broad (see Breadth tiers) |
How much Poka reads
B2 Broad. The common content of the current and the common older versions is decoded. Some named features or versions are not, and are listed.
Confidence: medium (the reviewer read the code). Basis: Reviewed 2026-10-26: read parsers/poka-jwks/src/main.rs (209 lines) and plugin.json. No unit tests or tests/samples.rs; the corpus has no .jwks and .jwks.json sample. Covers .jwks and .jwks.json. The table lists every key with kid, kty, alg and use, the key material's length with its first characters, and the x5c certificate count. Judgement: B2: every key is listed; the key material is deliberately shortened.
What Poka does not read
- Key material is shown as length and prefix only (by design)
- x5c certificates are counted, not decoded
- Curve, key size and thumbprints are not derived (judgement from the code)
- Only the first 500 keys are listed
Libraries
Libraries Poka uses or has assessed for this format, with the status, licence and language the registry records.
- serde_json (used; MIT OR Apache-2.0; Rust)
- jwk-simple (candidate; MIT; Rust; https://docs.rs/jwk-simple) — Parses JWK/JWKS per RFC 7517; core described as WASM compatible (repo https://github.com/sagikazarmark/jwk-simple); permissive parsing may skip invalid keys.
- jwks (candidate; MIT; Rust; https://github.com/chenhunghan/jwks) — Fetches and parses JWKS from a URL; oriented to network retrieval, so wasm32-wasip1 suitability not checked.
- Nimbus JOSE+JWT (candidate; Apache-2.0; Java; https://connect2id.com/products/nimbus-jose-jwt) — JWKSet class parses JWK sets from strings, files and URLs.
Sources
- parsers/poka-jwks/src/main.rs
- parsers/poka-jwks/plugin.json