OpenID Connect discovery document
curl --request GET \
--url https://web-api.dev.soxai.site/.well-known/openid-configurationimport requests
url = "https://web-api.dev.soxai.site/.well-known/openid-configuration"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://web-api.dev.soxai.site/.well-known/openid-configuration', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"issuer": "https://securetoken.google.com/<project id>",
"jwks_uri": "https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",
"authorization_endpoint": "https://api.soxai.co.jp/oauth2/login",
"token_endpoint": "https://api.soxai.co.jp/oauth2/token",
"scopes_supported": [
"openid",
"email",
"profile"
],
"response_types_supported": [
"code",
"id_token"
]
}{
"error": "rate-limited",
"error_msg": "Rate limit exceeded. Retry after <n> seconds."
}{
"error": "internal-server-error",
"error_msg": "Failed to fetch data: <error_message>"
}OAuth2
OpenID Connect discovery document
Not part of the Sandbox
A Sandbox key does not authenticate this endpoint and a Sandbox identity cannot complete it, because it belongs to the separate OAuth2 authentication flow. It is published here because the Sandbox runs the same build. See Sandbox.
The OpenID Connect discovery document: the issuer, the JWKS URI, and the authorization and token endpoint URLs an OIDC client needs in order to configure itself.
The values are static; nothing about the caller is read.
Parameters
- None. This endpoint takes no path, query or body parameter.
Response
200returns the discovery document:issuer,jwks_uri,authorization_endpoint,token_endpointand the algorithms supported.
Errors
- None. The values are static, so the document is either served or the process is down.
Authorization
- No authentication. The document is public by design.
GET
/
.well-known
/
openid-configuration
OpenID Connect discovery document
curl --request GET \
--url https://web-api.dev.soxai.site/.well-known/openid-configurationimport requests
url = "https://web-api.dev.soxai.site/.well-known/openid-configuration"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://web-api.dev.soxai.site/.well-known/openid-configuration', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"issuer": "https://securetoken.google.com/<project id>",
"jwks_uri": "https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",
"authorization_endpoint": "https://api.soxai.co.jp/oauth2/login",
"token_endpoint": "https://api.soxai.co.jp/oauth2/token",
"scopes_supported": [
"openid",
"email",
"profile"
],
"response_types_supported": [
"code",
"id_token"
]
}{
"error": "rate-limited",
"error_msg": "Rate limit exceeded. Retry after <n> seconds."
}{
"error": "internal-server-error",
"error_msg": "Failed to fetch data: <error_message>"
}Response
The discovery document an OIDC client reads to configure itself.