Authorisation Server

Read authorisation server metadata

GET/v4/service/consent/data-space/{organisationId}/.well-known/oauth-authorization-server

The public OAuth 2.0 authorisation server metadata (RFC 8414) of the data space endpoints of an organisation. A data using service reads it to find the token endpoint. No authentication.

Errors: 400 when the organisation does not exist; 403 when the organisation is suspended (organisation_suspended).

Language of the request sample

curl 'https://demo-api.igrant.io/v4/service/consent/data-space/{organisationId}/.well-known/oauth-authorization-server'

{
  "issuer": "https://demo-api.igrant.io",
  "token_endpoint": "https://demo-api.igrant.io/v4/service/consent/data-space/6ae2bf741c3dadfeb27982ec/token",
  "registration_endpoint": "https://demo-api.igrant.io/v4/service/consent/data-space/6ae2bf741c3dadfeb27982ec/register",
  "validate_token_endpoint": "https://demo-api.igrant.io/v4/service/consent/data-space/6ae2bf741c3dadfeb27982ec/validate-access"
}

Authorizations

Public. The operation takes no credentials.

Path parameters

organisationIdstringrequired
The ID of the organisation

Response

application/json

The authorisation server metadata.

issuerstring
Issuer of the access tokens (the iss claim).
token_endpointstring
Token endpoint. It supports the client_credentials and the JWT bearer (urn:ietf:params:oauth:grant-type:jwt-bearer) grants.
registration_endpointstring
Endpoint where another organisation registers as a client.
validate_token_endpointstring
Names .../{organisationId}/validate-access, but the service does not serve that URL. A data source checks an access token from a pull data request with POST /v4/service/consent/data-space/validate-access and an API key.