for generate jwks should we use Medplum CodexHealth Secret value?

Hm, I don't think I understand the question. You can create the jwks entirely from scratch.

what should be secret value for jwks?

Hi Yury! So I think the best resource is section 1.6 of this Medium article (https://darutk.medium.com/oauth-2-0-client-authentication-4b5f929305d4) * You can generate the public/private key just like you would generate another cryptographic key pair (see this Medium article for an example [https://darutk.medium.com/jwk-representing-self-signed-certificate-65276d70021b]) * This Google discussion talked about how to "host" the jwks [https://www.googlecloudcommunity.com/gc/Apigee/Publish-and-generate-JWKS/td-p/9962]. Key Quote: > You can host this as a static file on any any trustworthy web server. It makes sense to put it on the main .com site for your company or organization. A good pattern is to use the .well-known url path segment which is described in RFC 5785. Basically something like https://www.yourcompany.com/.well-known/jwks.json . On the details page for

ClientApplication

you can specify the

jwks_uri

that points to where you key is hosted: https://app.medplum.com/ClientApplication/992cb882-7e65-4385-aef6-36b7cd9d7b92/edit