Skip to main content

Variable: JWK_THUMBPRINT_PATTERN

const JWK_THUMBPRINT_PATTERN: "^[A-Za-z0-9_-]{43}$" = '^[A-Za-z0-9_-]{43}$'

Defined in: packages/contracts/src/schemas/federation.ts:203

A key id as published in a jwks: the RFC 7638 SHA-256 thumbprint of the public key, base64url without padding, so always 43 characters. Never the custodian's handle, which names a token and a slot and is no business of a verifier's.