diff --git a/plugins/auth-backend/src/identity/router.ts b/plugins/auth-backend/src/identity/router.ts
index a52e632ec2..e9dd1e0f80 100644
--- a/plugins/auth-backend/src/identity/router.ts
+++ b/plugins/auth-backend/src/identity/router.ts
@@ -53,6 +53,12 @@ export function createOidcRouter(options: Options) {
     res.json(config);
   });
 
+  router.get('/.well-known/jwks.json', async (_req, res) => {
+    logger.info('request certs');
+    const keys = await keyStore.listPublicKeys();
+    res.json(keys);
+  });
+
   router.get('/v1/token', (_req, res) => {
     logger.info('request token');
     res.status(501).send('Not Implemented');
@@ -63,11 +69,5 @@ export function createOidcRouter(options: Options) {
     res.status(501).send('Not Implemented');
   });
 
-  router.get('/v1/certs', async (_req, res) => {
-    logger.info('request certs');
-    const keys = await keyStore.listPublicKeys();
-    res.json(keys);
-  });
-
   return router;
 }