Auth
Read Plotwork's issuer document for an organisation
The issuer a federated credential or a private key JWT's provider trusts: issuer, jwks_uri and the fields OpenID Connect Discovery requires.
GET
/sso/oidc/{org}/.well-known/openid-configurationTL;DR
| Question | Answer |
|---|---|
| What does it do? | Read Plotwork's issuer document for an organisation. |
| What does it take? | org in the path. |
| What does it return? | Status 200 with a body of type SsoIssuerDocument. |
| What can go wrong? | 400 not an organisation id; 429 too many requests; 503 this server has no api_url, so it is no issuer (sso.unavailable). Every failure uses the one error envelope. |
What it does
The issuer a federated credential or a private key JWT's provider trusts: issuer, jwks_uri and the fields OpenID Connect Discovery requires. Built from the API's own address, the same for every id. Public, cacheable for five minutes.
Path parameters
| Field | Type | Required | Description |
|---|---|---|---|
org | string | yes |
Responses
| Status | Meaning | Body |
|---|---|---|
| 200 | The issuer document. | SsoIssuerDocument |
| 400 | Not an organisation id. | ErrorResponse |
| 429 | Too many requests. | ErrorResponse |
| 503 | This server has no API_URL, so it is no issuer (sso.unavailable). | ErrorResponse |
Response body
A 200 answer has the type SsoIssuerDocument.
| Field | Type | Required | Description |
|---|---|---|---|
issuer | string | yes | |
jwks_uri | string | yes | |
response_types_supported | string[] | yes | |
subject_types_supported | string[] | yes | |
id_token_signing_alg_values_supported | string[] | yes |
See also
| Doc | Why |
|---|---|
| API reference | Every endpoint, and the error envelope |
| Schemas | Every request and response type |
| Tool reference | The operations as callable tools |