NUS JSON Web Key Set

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/nus/refs/heads/main/json-schema/nus-jwks-schema.json",
  "title": "NUS JSON Web Key Set",
  "description": "Schema for the JWKS document published by the National University of Singapore identity provider at https://vafs.nus.edu.sg/adfs/discovery/keys, used to verify tokens NUS issues. Derived from the live document fetched 2026-08-19.",
  "x-generated": "2026-08-19",
  "x-method": "derived",
  "x-source": "https://vafs.nus.edu.sg/adfs/discovery/keys",
  "x-operator": "institution",
  "type": "object",
  "required": ["keys"],
  "properties": {
    "keys": {
      "type": "array",
      "minItems": 1,
      "items": {
        "type": "object",
        "required": ["kty", "use", "alg", "kid", "n", "e"],
        "properties": {
          "kty": { "type": "string", "const": "RSA" },
          "use": { "type": "string", "const": "sig" },
          "alg": { "type": "string", "const": "RS256" },
          "kid": { "type": "string", "description": "Key identifier; matches the JWT header kid." },
          "x5t": { "type": "string", "description": "X.509 SHA-1 thumbprint, base64url." },
          "n": { "type": "string", "description": "RSA modulus, base64url." },
          "e": { "type": "string", "description": "RSA public exponent, base64url. Observed value AQAB." },
          "x5c": { "type": "array", "items": { "type": "string" }, "description": "X.509 certificate chain, base64 DER." }
        }
      }
    }
  }
}