DCMAW-11093: feedback on README.md

govuk-one-login · Jan 20, 2025 · a3f8b71 · a3f8b71
1 parent 50160a5
commit a3f8b71
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend-api/README.md b/backend-api/README.md
@@ -141,7 +141,7 @@ npm run generate-proxy-open-api
 
 #### JSON Web Keys
 
-The `./.well-known/jwks.json` endpoint hosts the JSON Web Keys. It contains a JSON Web Key object containing information about the ID Check encryption key. This is used by STS for encrypting the service token sent to the `GET /async/activeSession` endpoint in the Authorization header. The encryption algorithm is `RSA-OAEP-256`, see [STS technical design](https://govukverify.atlassian.net/wiki/spaces/DCMAW/pages/3844964353/Strategic+App+App+calls+a+protected+service) for the public key requirements.
+The `/.well-known/jwks.json` endpoint serves the JSON Web Key Set object. It contains a JSON Web Key object containing information about the ID Check encryption key. This is used by STS for encrypting the service token sent to the `GET /async/activeSession` endpoint in the Authorization header. The encryption algorithm is `RSA-OAEP-256`, see [STS technical design](https://govukverify.atlassian.net/wiki/spaces/DCMAW/pages/3844964353/Strategic+App+App+calls+a+protected+service) for the public key requirements.
 
 The encryption key is created in AWS KMS. The infrastructure code lives in the `./template.yaml`.