Retrieves public keys of the legacy Identity Toolkit token signer to enable third parties to verify the legacy ID token. For now the X509 pem cert is the only format supported.
HTTP request
GET https://identitytoolkit.googleapis.com/v1/publicKeys
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-30 UTC."],[[["\u003cp\u003eThis API endpoint retrieves public keys used for verifying legacy Identity Toolkit tokens, currently supporting the X509 PEM certificate format.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP request to access these keys is a \u003ccode\u003eGET\u003c/code\u003e request to \u003ccode\u003ehttps://identitytoolkit.googleapis.com/v1/publicKeys\u003c/code\u003e, with a URL that uses gRPC Transcoding.\u003c/p\u003e\n"],["\u003cp\u003eNo request body is required, as the request must be empty.\u003c/p\u003e\n"],["\u003cp\u003eA successful response returns a body containing a Struct.\u003c/p\u003e\n"],["\u003cp\u003eAuthorization requires either the \u003ccode\u003ehttps://www.googleapis.com/auth/identitytoolkit\u003c/code\u003e or \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e OAuth scope.\u003c/p\u003e\n"]]],[],null,["# Method: getPublicKeys\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [Try it!](#try-it)\n\nRetrieves public keys of the legacy Identity Toolkit token signer to enable third parties to verify the legacy ID token. For now the X509 pem cert is the only format supported.\n\n### HTTP request\n\n`GET https://identitytoolkit.googleapis.com/v1/publicKeys`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Request body\n\nThe request body must be empty.\n\n### Response body\n\nIf successful, the response body contains an instance of [Struct](https://protobuf.dev/reference/protobuf/google.protobuf/#struct).\n\n### Authorization scopes\n\nRequires one of the following OAuth scopes:\n\n- `https://www.googleapis.com/auth/identitytoolkit`\n- `\n https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp)."]]
