Get the well known endpoint for discovery
GET/.well-known/openid-configuration
Get the well known endpoint for discovery
Request
Header Parameters
Possible values: Value must match regular expression ^(Mon|Tue|Wed|Thu|Fri|Sat|Sun), \d{2} (Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \d{4} \d{2}:\d{2}:\d{2} (GMT|UTC)$
The time when the PSU last logged in with the TPP. All dates in the HTTP headers are represented as RFC 7231 Full Dates. An example is below: Sun, 10 Sep 2017 19:43:31 UTC
The PSU's IP address if the PSU is currently logged in with the TPP.
An RFC4122 UID used as a correlation id.
Indicates the user-agent that the PSU is using.
Responses
- 201
- 401
- 403
- 404
- 429
- 500
- 502
- 504
endpoint discovery for well known endpoint
Response Headers
x-fapi-interaction-id
string
- application/json
- Schema
- Example (from schema)
Schema
REQUIRED. URL of the OP's OAuth 2.0 Authorization Endpoint
OPTIONAL. Boolean value specifying whether the OP supports use of the claims parameter, with true indicating support. If omitted, the default value is false
RECOMMENDED. JSON array containing a list of the Claim Names of the Claims that the OpenID Provider MAY be able to supply values for
OPTIONAL. JSON array containing a list of the OAuth 2.0 Grant Type values that this OP supports
REQUIRED. JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID Token to encode the Claims in a JWT
REQUIRED. URL using the https scheme with no query or fragment component that the OP asserts as its Issuer Identifier
REQUIRED. URL of the OP's JSON Web Key Set [JWK] document.
RECOMMENDED. URL of the OP's Dynamic Client Registration Endpoint
OPTIONAL. JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for Request Objects
OPTIONAL. Boolean value specifying whether the OP supports use of the request parameter, with true indicating support. If omitted, the default value is false
OPTIONAL. Boolean value specifying whether the OP supports use of the request_uri parameter, with true indicating support. If omitted, the default value is true
OPTIONAL. Boolean value specifying whether the OP requires any request_uri values used to be pre-registered using the request_uris registration parameter
OPTIONAL. JSON array containing a list of the OAuth 2.0 response_mode values that this OP supports
REQUIRED. JSON array containing a list of the OAuth 2.0 response_type values that this OP supports
RECOMMENDED. JSON array containing a list of the OAuth 2.0 [RFC6749] scope values that this server supports
REQUIRED. JSON array containing a list of the Subject Identifier types that this OP supports
OPTIONAL. JSON array containing a list of Client Authentication methods supported by this Token Endpoint
OPTIONAL. JSON array containing a list of the JWS signing algorithms (alg values) supported by the Token Endpoint for the signature on the JWT
URL of the OP's OAuth 2.0 Token Endpoint
RECOMMENDED. URL of the OP's UserInfo Endpoint
OPTIONAL. JSON array containing a list of the JWS signing algorithms (alg values) [JWA] supported by the UserInfo Endpoint to encode the Claims in a JWT
OPTIONAL. JSON array containing a list of the Claim Types that the OpenID Provider supports
{
"acr_values_supported": [
null
],
"authorization_endpoint": "string",
"claims_parameter_supported": true,
"claims_supported": [
null
],
"code_challenge_methods_supported": [
null
],
"end_session_endpoint": "string",
"check_session_endpoint": "string",
"grant_types_supported": [
null
],
"id_token_signing_alg_values_supported": [
null
],
"issuer": "string",
"jwks_uri": "string",
"registration_endpoint": "string",
"request_object_signing_alg_values_supported": "string",
"request_parameter_supported": true,
"request_uri_parameter_supported": true,
"require_request_uri_registration": true,
"pushed_authorization_request_endpoint": [
null
],
"response_modes_supported": [
null
],
"response_types_supported": [
null
],
"scopes_supported": [
null
],
"subject_types_supported": [
null
],
"token_endpoint_auth_methods_supported": [
null
],
"token_endpoint_auth_signing_alg_values_supported": [
null
],
"token_endpoint": "string",
"userinfo_endpoint": "string",
"userinfo_signing_alg_values_supported": [
null
],
"authorization_signing_alg_values_supported": [
null
],
"introspection_endpoint": "string",
"introspection_endpoint_auth_methods_supported": [
null
],
"introspection_endpoint_auth_signing_alg_values_supported": [
null
],
"revocation_endpoint": "string",
"revocation_endpoint_auth_methods_supported": [
null
],
"revocation_endpoint_auth_signing_alg_values_supported": [
null
],
"frontchannel_logout_supported": true,
"frontchannel_logout_session_supported": true,
"tls_client_certificate_bound_access_tokens": true,
"claim_types_supported": [
null
]
}
Unauthorized
Response Headers
x-fapi-interaction-id
string
Forbidden
Response Headers
x-fapi-interaction-id
string
Not found
Response Headers
x-fapi-interaction-id
string
- application/json
- Schema
- Example (from schema)
Schema
Validation Error messages
{
"errors": [
"string"
]
}
Too many requests, maximum capacity reached. Requests are now throttled.
Response Headers
x-fapi-interaction-id
string
Internal Server Error
Response Headers
x-fapi-interaction-id
string
Bad Gateway
Response Headers
x-fapi-interaction-id
string
Upstream timeout, insufficient capacity to serve request. More capacity being brought online. Please try again.
Response Headers
x-fapi-interaction-id
string