Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space PDOIDC and version master

Openid-configuration is a standard endpoint that returns configuration metadata in terms of key properties of the OIDC Provider. 

Table of Contents

Overview

URL https://<oidc-baseurl>/.well-known/openid-configuration
Request methodGET without any parameters
Client authenticationAuthenticationNone
Request parametersNone
Response elementsSuccess response200 OK with JSON structure according to standard.
Error reponseApplicable http error code
ExampleSee below

...


Anchor
example
example
Example

...

Code Block
languagexml
themeConfluence
titleRequest / Response
GET /auth/oidcrealms/oauthpreprod/.well-known/openid-configuration HTTP/1.1
Host: oidc-preprod.bankidapis.no
Connection: close
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_46) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/5861.0.30293163.110100 Safari/537.36
Cache-Control: no-cache
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8*/*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.8
 
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf-8
Date: Thu, 16 Nov 2017 12:07:47 GMT
Server: Microsoft-IIS/8.5
X-Powered-By: ARR/3.0WildFly/10
Cache-Control: no-cache
X-Powered-By: ASP.NET
Date: Tue, 23 May 2017 20:42:14 GMTUndertow/1
Content-Type: application/json
Content-Length: 1947
Via: 1.1 oidc-preprod.bankidapis.no
Connection: close
Content-Length: 1369
{

{
    "issuer": "https://oidc-preprod.bankidapis.no/auth/realms/preprod",
    "authorization_endpoint": "https://oidc-preprod.bankidapis.no/oidc/oauth/authorize/auth/realms/preprod/protocol/openid-connect/auth",
    "claimtoken_types_supportedendpoint": ["https://oidc-preprod.bankidapis.no/auth/realms/preprod/protocol/openid-connect/token",
        "normal""token_introspection_endpoint": "https://oidc-preprod.bankidapis.no/auth/realms/preprod/protocol/openid-connect/token/introspect",
    ]"userinfo_endpoint": "https://oidc-preprod.bankidapis.no/auth/realms/preprod/protocol/openid-connect/userinfo",
    "claimsend_parametersession_supportedendpoint": false"https://oidc-preprod.bankidapis.no/auth/realms/preprod/protocol/openid-connect/logout",
    "claimsjwks_supporteduri": ["https://oidc-preprod.bankidapis.no/auth/realms/preprod/protocol/openid-connect/certs",
    "check_session_iframe": "https://oidc-preprod.bankidapis.no/auth/realms/preprod/protocol/openid-connect/login-status-iframe.html",
    "preferredgrant_types_usernamesupported",: [
        "nameauthorization_code",
        "subimplicit",
        "iatrefresh_token",
        "isspassword",
        "authclient_timecredentials",
    ],
    "exp",response_types_supported": [
        "birthdatecode",
        "noncenone",
        "amrid_token",
        "azptoken",
        "bidid_codetoken token",
        "audcode id_token",
        "at_hashcode token",
        "c_hash",code id_token token"
    ],
    "nnin",subject_types_supported": [
        "addresspublic",
        "phonepairwise"
    ],
    "grant_typesid_token_signing_alg_values_supported": [
        "authorization_codeRS256"
    ],
    "iduserinfo_token_signing_alg_values_supported": [
        "RS256"
    ],
    "issuerrequest_object_signing_alg_values_supported": "https://preprod.bankidapis.no",[
       "jwks_uri": "https://preprod.bankidapis.no/oidc/oauth/userinfo/jwk "none",
    "login_hint_supported": "[BIM|BID][:\\d{11}][:\\d{8}][:\\d{6}] for respectively client_type, nnin, phoneNo, birthday"    "RS256"
    ],
    "response_modes_supported": [
        "query",
        "fragment",
        "form_post"
    ],
    "responseregistration_types_supportedendpoint": [
        "code",
"https://oidc-preprod.bankidapis.no/auth/realms/preprod/clients-registrations/openid-connect",
       "token",_endpoint_auth_methods_supported": [
        "idprivate_key_tokenjwt",
        "id_token tokenclient_secret_basic",
        "code token",client_secret_post"
    ],
    "code id_token",token_endpoint_auth_signing_alg_values_supported": [
        "code id_token tokenRS256"
    ],
    "scopesclaims_supported": [
        "standard_bankidsub",
        "addressiss",
        "phoneauth_time",
        "operational-status-readname",
        "nningiven_name",
        "openidfamily_name",
        "profile",
        "operational-status-writepreferred_username",
        "email"
    ],
    "serverVersion": "bankid-oauth-api 1.2.7",
    "subjectclaim_types_supported": [
        "publicnormal"
    ],
    "tokenclaims_parameter_endpointsupported": "https://preprod.bankidapis.no/oidc/oauth/token"false,
    "token_endpoint_auth_methods_scopes_supported": [
        "client_secret_postopenid",
        "clientoffline_secret_basicaccess"
    ],
    "uirequest_localesparameter_supported": [
        "no",
   true,
    "en"
    ],
    "userinfo_endpoint": "https://preprod.bankidapis.no/oidc/oauth/userinfo",
    "userinfo_signing_alg_valuesrequest_uri_parameter_supported": [
        "RS256",
        "none"
    ]
}
true
}