Skip to content
Authrim

Return OpenID Provider metadata.

GET
/.well-known/openid-configuration
Code sample: Shell / cURL 
curl --request GET \
  --url https://auth.example.com/.well-known/openid-configuration

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Successful JSON response.

Media type application/json
object
issuer
required
string format: uri
authorization_endpoint
required
string format: uri
token_endpoint
required
string format: uri
userinfo_endpoint
string format: uri
jwks_uri
required
string format: uri
registration_endpoint
string format: uri
introspection_endpoint
string format: uri
revocation_endpoint
string format: uri
pushed_authorization_request_endpoint
string format: uri
require_pushed_authorization_requests
boolean
authorization_response_iss_parameter_supported
boolean
request_parameter_supported
boolean
request_uri_parameter_supported
boolean
response_types_supported
required
Array<string>
response_modes_supported
Array<string>
Allowed values: query fragment form_post query.jwt fragment.jwt form_post.jwt jwt
grant_types_supported
required
Array<string>
scopes_supported
Array<string>
claims_supported
Array<string>
id_token_signing_alg_values_supported
Array<string>
Allowed values: RS256 ES256 PS256
userinfo_signing_alg_values_supported
Array<string>
Allowed values: RS256 ES256 PS256
token_endpoint_auth_methods_supported
Array<string>
token_endpoint_auth_signing_alg_values_supported
Array<string>
Allowed values: RS256 ES256 PS256
request_object_signing_alg_values_supported
Array<string>
Allowed values: none RS256 ES256 PS256
backchannel_authentication_endpoint
string format: uri
backchannel_token_delivery_modes_supported
Array<string>
Allowed values: poll ping push
backchannel_authentication_request_signing_alg_values_supported
Array<string>
Allowed values: RS256 ES256 PS256
backchannel_user_code_parameter_supported
boolean
tls_client_certificate_bound_access_tokens
boolean - PS256 - EdDSA
authorization_signing_alg_values_supported
Array<string>
Allowed values: RS256 ES256
authorization_encryption_alg_values_supported
Array<string>
Allowed values: RSA-OAEP RSA-OAEP-256 ECDH-ES ECDH-ES+A128KW ECDH-ES+A192KW ECDH-ES+A256KW
authorization_encryption_enc_values_supported
Array<string>
Allowed values: A128GCM A192GCM A256GCM A128CBC-HS256 A192CBC-HS384 A256CBC-HS512
dpop_signing_alg_values_supported
Array<string>
code_challenge_methods_supported
Array<string>
key
additional properties
Example 
{
  "issuer": "https://auth.example.com",
  "authorization_endpoint": "https://auth.example.com/authorize",
  "token_endpoint": "https://auth.example.com/token",
  "jwks_uri": "https://auth.example.com/.well-known/jwks.json",
  "response_types_supported": [
    "code",
    "id_token",
    "code id_token"
  ],
  "grant_types_supported": [
    "authorization_code",
    "refresh_token",
    "refresh_token"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ]
}