OpenID Connect discovery document
curl --request GET \
--url https://web-api.soxai.site/.well-known/openid-configurationimport requests
url = "https://web-api.soxai.site/.well-known/openid-configuration"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://web-api.soxai.site/.well-known/openid-configuration', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"issuer": "https://securetoken.google.com/<project id>",
"jwks_uri": "https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",
"authorization_endpoint": "https://api.soxai.co.jp/oauth2/login",
"token_endpoint": "https://api.soxai.co.jp/oauth2/token",
"scopes_supported": [
"openid",
"email",
"profile"
],
"response_types_supported": [
"code",
"id_token"
]
}{
"error": "rate-limited",
"error_msg": "Rate limit exceeded. Retry after <n> seconds."
}{
"error": "internal-server-error",
"error_msg": "Failed to fetch data: <error_message>"
}OAuth2
OpenID Connect discovery document
The OpenID Connect discovery document: the issuer, the JWKS URI, and the authorization and token endpoint URLs an OIDC client needs in order to configure itself.
The values are static; nothing about the caller is read.
Parameters
- None. This endpoint takes no path, query or body parameter.
Response
200returns the discovery document:issuer,jwks_uri,authorization_endpoint,token_endpointand the algorithms supported.
Errors
- None. The values are static, so the document is either served or the process is down.
Authorization
- No authentication. The document is public by design.
GET
/
.well-known
/
openid-configuration
OpenID Connect discovery document
curl --request GET \
--url https://web-api.soxai.site/.well-known/openid-configurationimport requests
url = "https://web-api.soxai.site/.well-known/openid-configuration"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://web-api.soxai.site/.well-known/openid-configuration', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"issuer": "https://securetoken.google.com/<project id>",
"jwks_uri": "https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",
"authorization_endpoint": "https://api.soxai.co.jp/oauth2/login",
"token_endpoint": "https://api.soxai.co.jp/oauth2/token",
"scopes_supported": [
"openid",
"email",
"profile"
],
"response_types_supported": [
"code",
"id_token"
]
}{
"error": "rate-limited",
"error_msg": "Rate limit exceeded. Retry after <n> seconds."
}{
"error": "internal-server-error",
"error_msg": "Failed to fetch data: <error_message>"
}Response
The discovery document an OIDC client reads to configure itself.