Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Auth0 Provider
  4. API Docs
  5. getSigningKeys
Viewing docs for Auth0 v3.46.0
published on Friday, Jun 19, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-auth0

auth0.getSigningKeys

auth0 logo
Viewing docs for Auth0 v3.46.0
published on Friday, Jun 19, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-auth0

    Data source to retrieve signing keys used by the applications in your tenant. Learn more.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as auth0 from "@pulumi/auth0";

function tryOutput_(
	...fns: Array<() => pulumi.Input<any>>
): pulumi.Output<any> {
	if (fns.length === 0) {
		throw new Error("try: all parameters failed");
	}
	const [fn, ...rest] = fns;
	try {
		return pulumi.output(fn()).apply(result => result !== undefined ? result : tryOutput_(...rest));
	} catch {
		return tryOutput_(...rest);
	}
	throw new Error("try: all parameters failed");
}


const myKeys = auth0.getSigningKeys({});
export const currentKey = tryOutput_(
    () => myKeys.then(myKeys => .filter(key => key.current).map(key => (key.kid)))[0],
    () => "No current key found"
);

    import pulumi
import pulumi_auth0 as auth0

def try_(*fns):
    for fn in fns:
        try:
            result = fn()
            return result
        except:
            continue
    return None


my_keys = auth0.get_signing_keys()
pulumi.export("currentKey", try_(
    lambda: [key.kid for key in my_keys.signing_keys if key.current][0],
    lambda: "No current key found"
))

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    pulumi {
  required_providers {
    auth0 = {
      source = "pulumi/auth0"
    }
  }
}

data "auth0_getsigningkeys" "myKeys" {
}

# Example on how to get the current key from the data source.
output "currentKey" {
  value = try(element([for key in data.auth0_getsigningkeys.myKeys.signing_keys : key.kid if key.current], 0), "No current key found")
}

    Using getSigningKeys

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getSigningKeys(opts?: InvokeOptions): Promise<GetSigningKeysResult>
function getSigningKeysOutput(opts?: InvokeOptions): Output<GetSigningKeysResult>
    def get_signing_keys(opts: Optional[InvokeOptions] = None) -> GetSigningKeysResult
def get_signing_keys_output(opts: Optional[InvokeOptions] = None) -> Output[GetSigningKeysResult]
    func GetSigningKeys(ctx *Context, opts ...InvokeOption) (*GetSigningKeysResult, error)
func GetSigningKeysOutput(ctx *Context, opts ...InvokeOption) GetSigningKeysResultOutput

    > Note: This function is named GetSigningKeys in the Go SDK.

    public static class GetSigningKeys 
{
    public static Task<GetSigningKeysResult> InvokeAsync(InvokeOptions? opts = null)
    public static Output<GetSigningKeysResult> Invoke(InvokeOptions? opts = null)
}
    public static CompletableFuture<GetSigningKeysResult> getSigningKeys(InvokeOptions options)
public static Output<GetSigningKeysResult> getSigningKeys(InvokeOptions options)

    fn::invoke:
  function: auth0:index/getSigningKeys:getSigningKeys
  arguments:
    # arguments dictionary
    data "auth0_getsigningkeys" "name" {
    # arguments
}

    getSigningKeys Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    SigningKeys List<GetSigningKeysSigningKey>
    All application signing keys.
    Id string
    The provider-assigned unique ID for this managed resource.
    SigningKeys []GetSigningKeysSigningKey
    All application signing keys.
    id string
    The provider-assigned unique ID for this managed resource.
    signing_keys list(object)
    All application signing keys.
    id String
    The provider-assigned unique ID for this managed resource.
    signingKeys List<GetSigningKeysSigningKey>
    All application signing keys.
    id string
    The provider-assigned unique ID for this managed resource.
    signingKeys GetSigningKeysSigningKey[]
    All application signing keys.
    id str
    The provider-assigned unique ID for this managed resource.
    signing_keys Sequence[GetSigningKeysSigningKey]
    All application signing keys.
    id String
    The provider-assigned unique ID for this managed resource.
    signingKeys List<Property Map>
    All application signing keys.

    Supporting Types

    GetSigningKeysSigningKey

    Cert string
    The public certificate of the signing key.
    Current bool
    True if the key is the the current key.
    Fingerprint string
    The cert fingerprint.
    Kid string
    The key ID of the signing key.
    Next bool
    True if the key is the the next key.
    Pkcs7 string
    The public certificate of the signing key in PKCS7 format.
    Previous bool
    True if the key is the the previous key.
    Revoked bool
    True if the key is revoked.
    Thumbprint string
    The cert thumbprint.
    Cert string
    The public certificate of the signing key.
    Current bool
    True if the key is the the current key.
    Fingerprint string
    The cert fingerprint.
    Kid string
    The key ID of the signing key.
    Next bool
    True if the key is the the next key.
    Pkcs7 string
    The public certificate of the signing key in PKCS7 format.
    Previous bool
    True if the key is the the previous key.
    Revoked bool
    True if the key is revoked.
    Thumbprint string
    The cert thumbprint.
    cert string
    The public certificate of the signing key.
    current bool
    True if the key is the the current key.
    fingerprint string
    The cert fingerprint.
    kid string
    The key ID of the signing key.
    next bool
    True if the key is the the next key.
    pkcs7 string
    The public certificate of the signing key in PKCS7 format.
    previous bool
    True if the key is the the previous key.
    revoked bool
    True if the key is revoked.
    thumbprint string
    The cert thumbprint.
    cert String
    The public certificate of the signing key.
    current Boolean
    True if the key is the the current key.
    fingerprint String
    The cert fingerprint.
    kid String
    The key ID of the signing key.
    next Boolean
    True if the key is the the next key.
    pkcs7 String
    The public certificate of the signing key in PKCS7 format.
    previous Boolean
    True if the key is the the previous key.
    revoked Boolean
    True if the key is revoked.
    thumbprint String
    The cert thumbprint.
    cert string
    The public certificate of the signing key.
    current boolean
    True if the key is the the current key.
    fingerprint string
    The cert fingerprint.
    kid string
    The key ID of the signing key.
    next boolean
    True if the key is the the next key.
    pkcs7 string
    The public certificate of the signing key in PKCS7 format.
    previous boolean
    True if the key is the the previous key.
    revoked boolean
    True if the key is revoked.
    thumbprint string
    The cert thumbprint.
    cert str
    The public certificate of the signing key.
    current bool
    True if the key is the the current key.
    fingerprint str
    The cert fingerprint.
    kid str
    The key ID of the signing key.
    next bool
    True if the key is the the next key.
    pkcs7 str
    The public certificate of the signing key in PKCS7 format.
    previous bool
    True if the key is the the previous key.
    revoked bool
    True if the key is revoked.
    thumbprint str
    The cert thumbprint.
    cert String
    The public certificate of the signing key.
    current Boolean
    True if the key is the the current key.
    fingerprint String
    The cert fingerprint.
    kid String
    The key ID of the signing key.
    next Boolean
    True if the key is the the next key.
    pkcs7 String
    The public certificate of the signing key in PKCS7 format.
    previous Boolean
    True if the key is the the previous key.
    revoked Boolean
    True if the key is revoked.
    thumbprint String
    The cert thumbprint.

    Package Details

    Repository
    Auth0 pulumi/pulumi-auth0
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the auth0 Terraform Provider.
    auth0 logo
    Viewing docs for Auth0 v3.46.0
    published on Friday, Jun 19, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-auth0

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial