Auth
Read Plotwork's issuer document for an organisation's buckets
The issuer a bucket's trust names: issuer, jwks_uri and the fields OpenID Connect Discovery requires.
GET
/storage/oidc/{org}/.well-known/openid-configurationTL;DR
| Question | Answer |
|---|---|
| What does it do? | Read Plotwork's issuer document for an organisation's buckets. |
| What does it take? | org in the path. |
| What does it return? | Status 200 with a body of type StorageIssuerDocument. |
| What can go wrong? | 400 not an organisation id; 429 too many requests; 503 this server has no API_URL, so it is no issuer (storage.unavailable). Every failure uses the one error envelope. |
What it does
The issuer a bucket's trust names: issuer, jwks_uri and the fields OpenID Connect Discovery requires. The same for every id. Public, cacheable for five minutes.
Path parameters
| Field | Type | Required | Description |
|---|---|---|---|
org | string | yes | The organisation's id. |
Responses
| Status | Meaning | Body |
|---|---|---|
| 200 | The issuer document. | StorageIssuerDocument |
| 400 | Not an organisation id. | ErrorResponse |
| 429 | Too many requests. | ErrorResponse |
| 503 | This server has no API_URL, so it is no issuer (storage.unavailable). | ErrorResponse |
Response body
A 200 answer has the type StorageIssuerDocument.
| Field | Type | Required | Description |
|---|---|---|---|
issuer | string | yes | |
jwks_uri | string | yes | |
response_types_supported | string[] | yes | |
subject_types_supported | string[] | yes | |
id_token_signing_alg_values_supported | string[] | yes | |
claims_supported | string[] | yes |
See also
| Doc | Why |
|---|---|
| API reference | Every endpoint, and the error envelope |
| Schemas | Every request and response type |
| Tool reference | The operations as callable tools |