ZITADEL Docs
APIsCore ResourcesV2Web Key

DeleteWebKey

Delete Web Key

Delete a web key pair. Only inactive keys can be deleted. Once a key is deleted, any tokens signed by this key will be invalid. Note that the JWKs OIDC endpoint returns a cacheable response. In case the web key is not found, the request will return a successful response as the desired state is already achieved. You can check the change date in the response to verify if the web key was deleted during the request.

Required permission:

  • iam.web_key.delete
DELETE
/v2/web_keys/{id}

Path Parameters

id*string

The unique identifier of the key to delete.

Response Body

application/json

application/json

curl -X DELETE "https://loading/v2/web_keys/string"
{
  "deletionDate": "1s"
}
{
  "code": "not_found",
  "message": "string",
  "detail": {
    "type": "string",
    "value": "string",
    "debug": {}
  }
}

Was this page helpful?