Skip to content

Discover an OIDC provider configuration.

POST
/api/admin/external-providers/discover-oidc
Code sample: Shell / cURL
curl --request POST \
--url https://auth.example.com/api/admin/external-providers/discover-oidc \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{ "url": "https://accounts.google.com" }'

Fetches and sanitizes an external OIDC discovery document for the supplied HTTPS issuer or discovery URL. The implementation blocks localhost, private/internal hosts, non-standard ports, oversized responses, unsafe redirects, and non-JSON responses.

Media type application/json
object
url
required
string format: uri
key
additional properties
Example
{
"url": "https://accounts.google.com"
}

Sanitized OIDC discovery response.

Media type application/json
object
issuer
required
string format: uri
authorization_endpoint
required
string format: uri
token_endpoint
required
string format: uri
userinfo_endpoint
string format: uri
jwks_uri
string format: uri
scopes_supported
Array<string>
key
additional properties
Example generated
{
"issuer": "https://example.com",
"authorization_endpoint": "https://example.com",
"token_endpoint": "https://example.com",
"userinfo_endpoint": "https://example.com",
"jwks_uri": "https://example.com",
"scopes_supported": [
"example"
]
}

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
"error": "example",
"message": "example",
"error_description": "example"
}

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
"error": "example",
"message": "example",
"error_description": "example"
}

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
"error": "example",
"message": "example",
"error_description": "example"
}

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
"error": "example",
"message": "example",
"error_description": "example"
}

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
"error": "example",
"message": "example",
"error_description": "example"
}