# Retrieve latest public key

Returns the latest Solaris public RSA key in JWK format. Call this method every time before you call the  method to ensure you have the latest key. See RFC7517 for more information on JWKs.

Endpoint: GET /v1/cards/pin_keys/latest
Version: 1.0

## Response 200 fields (application/json):

  - `kid` (string, required)
    ID of the returned public key. Use this value for the  attribute when encrypting the PIN in JWE format.

  - `kty` (string, required)
    The key type parameter identifies the cryptographic algorithm family used with the key. Only  is supported.
    Enum: "RSA"

  - `use` (string, required)
    Specifies the intended use of the key. Values defined by this specification are  (signature) and  (encryption). This property is case-sensitive.
    Enum: "enc"

  - `alg` (string, required)
    Specifies the algorithm intended for use with the key. For this property, you should either use an algorithm registered in the [IANA JSON Web Signature and Encryption Algorithms registry](https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms) or a value that contains a collision-resistant name. This value is a case-sensitive ASCII string.
    Enum: "RS256"

  - `n` (string, required)
    Contains the modulus value for the RSA public key, represented as the Base64URL encoding of the value's big-endian representation.

  - `e` (string, required)
    Contains the exponent value for the RSA public key, represented as the Base64URL encoding of the value's big-endian representation.

## Response 401 fields (application/json):

  - `id` (string)
    Example: "a95f2aaf-4e0c-4d49-8021-8a16a884ed86"

  - `status` (string)
    Example: "401"

  - `code` (string)
    Example: "token_required"

  - `title` (string)

  - `detail` (string)
    Example: "Bearer Token is not provided"

## Response 403 fields (application/json):

  - `id` (string)
    Example: "a95f2aaf-4e0c-4d49-8021-8a16a884ed86"

  - `status` (string)
    Example: "403"

  - `code` (string)
    Example: "unauthorized_action"

  - `title` (string)
    Example: "Unauthorized Action"

  - `detail` (string)
    Example: "Unauthorized action is not allowed."

## Response 404 fields (application/json):

  - `id` (string)
    Example: "a95f2aaf-4e0c-4d49-8021-8a16a884ed86"

  - `status` (string)
    Example: "404"

  - `code` (string)
    Example: "model_not_found"

  - `title` (string)
    Example: "Model Not Found"

  - `detail` (string)
    Example: "Couldn't find 'Solaris::Identification' for id 'bbbcccfff388923eb899a5852df6cidt'."

## Response 500 fields (application/json):

  - `id` (string)
    Example: "e8915041-9d8c-4d96-9dd1-04e8522ecdbf"

  - `status` (string)
    Example: "500"

  - `code` (string)
    Example: "generic_error"

  - `title` (string)
    Example: "Generic Error"

  - `detail` (string)
    Example: "There was an error."