OpenID Provider (Sandbox organisation)

JWKS endpoint

GET/v4/service/platform/extension/oidc/{organisationId}/{sandboxOrgId}/.well-known/jwks.json

The endpoint of the OpenID Provider of a sandbox organisation. It works like the endpoint of the main organisation; the path holds the ID of the sandbox organisation after the ID of the organisation.

Returns the public keys that sign the ID tokens and the access tokens of the sandbox organisation (JSON Web Key Set). Each OIDC client has its own key; pick the key with the kid of the token header.

The endpoint is public. It answers once Passwordless Login was turned on for the sandbox organisation.

JWKS endpoint

Language of the request sample

curl 'https://demo-api.igrant.io/v4/service/platform/extension/oidc/{organisationId}/{sandboxOrgId}/.well-known/jwks.json'

{
  "keys": [
    {
      "kty": "EC",
      "kid": "c0e7e84999d4f6920cf68d1bd4db7e22",
      "use": "sig",
      "alg": "ES256",
      "crv": "P-256",
      "x": "gy3QBN9eB1evIh1PpUjd0J9GCXiQcq1hKeZiZ6u2KrM",
      "y": "Eu9JCunySRrzPMKJhNqJqE8h5YuXeru59Xu6P5f3-4E"
    }
  ]
}

Authorizations

Public. The operation takes no credentials.

Path parameters

organisationIdstringrequired
The ID of the organisation
sandboxOrgIdstringrequired
Unique identifier of the sandbox organisation.

Response

application/json

The key set.

keysobject[] | null
The public signing keys of the provider, one for each OIDC client (including deleted clients). Find the key with the kid of the token header. null when the organisation has no client yet.