Discovery Metadata

GET /.well-known/openid-configuration

Get OIDC discovery metadata including all endpoints and supported features.

If using an off-the-shelf OAuth or OIDC plugin, this may be the only URL you need to enter, as the contents found at this URL explain where to find all other endpoints, and how to communicate with our system.

Responses

Status	Description
`200 OK`	OIDC discovery metadata

Content type application/json

DiscoveryMetadata (200)

Field	Type	Required	Description
`issuer`	string	no	Issuer identifier URL.
`authorization_endpoint`	string	no
`token_endpoint`	string	no
`userinfo_endpoint`	string	no
`jwks_uri`	string	no
`end_session_endpoint`	string	no
`check_session_iframe`	string	no
`scopes_supported`	array of string	no
`response_types_supported`	array of string	no
`grant_types_supported`	array of string	no
`subject_types_supported`	array of string	no
`id_token_signing_alg_values_supported`	array of string	no
`code_challenge_methods_supported`	array of string	no
`pushed_authorization_request_endpoint`	string	no	Where confidential clients POST a pushed authorization request (RFC 9126).
`require_pushed_authorization_requests`	boolean	no	`false`: pushing is recommended for confidential clients but the direct authorization request is still accepted.
`request_uri_parameter_supported`	boolean	no	`false`: OpenID Connect request objects by reference (JAR) are not supported. This does not affect PAR - a `request_uri` from the pushed authorization request endpoint is always accepted.

Example 200 response

{
  "issuer": "string",
  "authorization_endpoint": "string",
  "token_endpoint": "string",
  "userinfo_endpoint": "string",
  "jwks_uri": "string",
  "end_session_endpoint": "string",
  "check_session_iframe": "string",
  "scopes_supported": [
    "string"
  ],
  "response_types_supported": [
    "string"
  ],
  "grant_types_supported": [
    "string"
  ],
  "subject_types_supported": [
    "string"
  ],
  "id_token_signing_alg_values_supported": [
    "string"
  ],
  "code_challenge_methods_supported": [
    "string"
  ],
  "pushed_authorization_request_endpoint": "https://sandbox.truevault.com.au/oauth/oidc/par",
  "require_pushed_authorization_requests": false,
  "request_uri_parameter_supported": false
}

Example request

curl --request GET \
  --url https://sandbox.truevault.com.au/.well-known/openid-configuration