获取OpenID Provider配置

应用可以通过此接口获取 OIDC 授权服务器的配置信息。具体的配置信息及其含义请参考 OpenID Connect Discovery 标准。

请求说明

请求方式：GET

请求地址：https://{your_domain}/api/v1/authorize/{app_code}/oidc/.well-known/openid-configuration

请求示例

GET https://{your_domain}/api/v1/authorize/{app_code}/oidc/.well-known/openid-configuration

响应示例

{
  "issuer": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oidc",
  "authorization_endpoint": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oauth2/auth",
  "device_authorization_endpoint": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oauth2/device_authorization",
  "token_endpoint": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oauth2/token",
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "jwks_uri": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oidc/jwks",
  "userinfo_endpoint": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oauth2/userinfo",
  "end_session_endpoint": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oidc/connect/logout",
  "response_types_supported": [
    "code",
    "token",
    "id_token"
  ],
  "grant_types_supported": [
    "authorization_code",
    "password",
    "implicit",
    "refresh_token",
    "urn:ietf:params:oauth:grant-type:device_code"
  ],
  "revocation_endpoint": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oauth2/revoke",
  "revocation_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "introspection_endpoint": "https://portal.topiam.cn/api/v1/authorize/5qsqmlnewbuzldmgcclogubryizmcmlw/oauth2/introspect",
  "introspection_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "subject_types_supported": [
    "public"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "email",
    "profile"
  ]
}