Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space PDOIDC and version master

...

URL https://<oidc-baseurl>/.well-known/openid-configuration
RequestGET without any parameters
AuthenticationNone
Success response200 OK with JSON structure according to standard.
Error reponseApplicable http error code
ExampleSee below


Anchor
example
example
Example

...

Code Block
languagexml
themeConfluence
titleRequest / Response
GET /auth/realms/preprodcurrent/.well-known/openid-configuration HTTP/1.1
Host: oidc-preprod.bankidapisauth.current.bankid.no
Connection: close
User-Agent: Mozillacurl/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36
Cache-Control: no-cache
7.64.1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.8
 
HTTP/1.1 200 OK
Date: ThuWed, 1618 NovAug 20172021 1210:0726:4735 GMT
Server: WildFly/10web
Cache-Control: no-cache, must-revalidate, no-transform, no-store
X-PoweredXSS-ByProtection: Undertow/1
Content-Type: application/json
Content-Length: 1947
Via: 1.1 oidc-preprod.bankidapis.no
Connection: close; mode=block
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Type: application/json
Content-Length: 3000

{
    "issuer": "https://oidc-preprod.bankidapisauth.current.bankid.no/auth/realms/preprodcurrent",
    "authorization_endpoint": "https://oidc-preprod.bankidapisauth.current.bankid.no/auth/realms/preprodcurrent/protocolprecheck/openid-connect/auth",
    "token_endpoint": "https://oidc-preprod.bankidapisauth.current.bankid.no/auth/realms/preprodcurrent/protocol/openid-connect/token",
    "token_introspection_endpoint": "https://oidc-preprod.bankidapisauth.current.bankid.no/auth/realms/preprodcurrent/protocol/openid-connect/token/introspect",
    "userinfo_endpoint": "https://oidc-preprod.bankidapisuserinfo.current.bankid.no/auth/realms/preprod/protocol/openid-connect/userinfo",
    "end_session_endpoint": "https://oidc-preprod.bankidapisauth.current.bankid.no/auth/realms/preprodcurrent/protocol/openid-connect/logout",
    "jwks_uri": "https://oidc-preprod.bankidapisauth.current.bankid.no/auth/realms/preprodcurrent/protocol/openid-connect/certs",
    "check_session_iframe": "https://oidc-preprod.bankidapisauth.current.bankid.no/auth/realms/preprodcurrent/protocol/openid-connect/login-status-iframe.html",
    "grant_types_supported": [
        "authorization_code",
        "implicit",
        "refresh_token",
        "password",
        "client_credentials"
    ],
    "response_types_supported": [
        "code",
        "none",
        "id_token",
        "token",
        "id_token token",
        "code id_token",
        "code token",
        "code id_token token"
    ],
    "subject_types_supported": [
        "public",
        "pairwise"
    ],
    "id_token_signing_alg_values_supported": [
        "PS384",
        "ES384",
        "RS384",
        "HS256",
        "HS512",
        "ES256",
        "RS256",
        "HS384",
        "ES512",
        "PS256",
        "PS512",
        "RS512"
    ],
    "id_token_encryption_alg_values_supported": [
        "RSA-OAEP",
        "RSA1_5"
    ],
    "id_token_encryption_enc_values_supported": [
        "A128GCM",
        "A128CBC-HS256"
    ],
    "userinfo_signing_alg_values_supported": [
        "RS256"
    ],
    "request_object_signing_alg_values_supported": [
        "PS384",
        "ES384",
        "RS384",
        "HS256",
        "HS512",
        "noneES256",
        "RS256",
        "HS384",
        "ES512",
        "PS256",
        "PS512",
        "RS512",
        "none"
    ],
    "response_modes_supported": [
        "query",
        "fragment",
        "form_post"
    ],
    "registration_endpoint": "https://oidc-preprod.bankidapis.no/auth/realms/preprod/clients-registrations/openid-connect",
    "token_endpoint_auth_methods_supported": [
        "private_key_jwt",
        "client_secret_basic",
        "client_secret_post",
        "tls_client_auth",
        "client_secret_jwt"
    ],
    "token_endpoint_auth_signing_alg_values_supported": [
        "PS384",
        "ES384",
        "RS384",
        "HS256",
        "HS512",
        "ES256",
        "RS256",
        "HS384",
        "ES512",
        "PS256",
        "PS512",
        "RS512"
    ],
    "claims_supported": [
        "at_hash",
        "birthdate",
        "bankid_altsub",
        "given_name",
        "nonce",
        "acr",
        "c_hash",
        "subupdated_at",
        "issnnin_altsub",
        "auth_time",
        "name",
        "givensession_namestate",
        "family_name",
        "sub",
        "amr",
        "iss",
        "typ",
        "aud",
        "nbf",
        "azp",
        "exp",
        "preferred_username"iat",
        "jti",
        "realm_access",
        "emailresource_access"
    ],
    "claim_types_supported": [
        "normal"
    ],
    "claims_parameter_supported": false,
    "scopes_supported": [
        "openid",
        "profile",
        "address",
        "email",
        "phone",
        "nnin_altsub",
        "offline_access"nnin",
        "sign",
        "signdoc/read_write",
        "fraud-data-rs/GetSecurityData",
        "aml_person/basic"
    ],
    "request_parameter_supported": true,
    "request_uri_parameter_supported": true,
    "code_challenge_methods_supported": [
        "plain",
        "S256"
    ],
    "tls_client_certificate_bound_access_tokens": true,
    "introspection_endpoint": "https://auth.current.bankid.no/auth/realms/current/protocol/openid-connect/token/introspect",
    "fraud-data-baseurl": "https://frauddata-rs-current.bankidapis.no/",
    "release": "2021-08",
    "signdoc-baseurl": "https://signdoc-rs-current.bankidapis.no/",
    "ui_locales_supported": [
        "nb",
        "no",
        "en"
    ],
    "aml-baseurl": "https://aml-current.bankidapis.no/",
    "jwks_uri_enc": "https://auth.current.bankid.no/auth/realms/current/encryption/keys"
}