Discover an OIDC provider configuration.

POST

/api/admin/external-providers/discover-oidc

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/admin/external-providers/discover-oidc \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "url": "https://accounts.google.com" }'

Fetches and sanitizes an external OIDC discovery document for the supplied HTTPS issuer or discovery URL. The implementation blocks localhost, private/internal hosts, non-standard ports, oversized responses, unsafe redirects, and non-JSON responses.

Authorizations

• adminBearer
• adminSessionCookie

Request Body ^required

Media type application/json

object

url

required

string format: uri

key

additional properties

Example

{
  "url": "https://accounts.google.com"
}

Responses

200

Sanitized OIDC discovery response.

Media type application/json

object

issuer

required

string format: uri

authorization_endpoint

required

string format: uri

token_endpoint

required

string format: uri

userinfo_endpoint

string format: uri

jwks_uri

string format: uri

scopes_supported

Array<string>

key

additional properties

Example ^generated

{
  "issuer": "https://example.com",
  "authorization_endpoint": "https://example.com",
  "token_endpoint": "https://example.com",
  "userinfo_endpoint": "https://example.com",
  "jwks_uri": "https://example.com",
  "scopes_supported": [
    "example"
  ]
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

404

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

500

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}