OpenID Provider (Sandbox organisation)

UserInfo endpoint

POST/v4/service/platform/extension/oidc/{organisationId}/{sandboxOrgId}/userinfo

The endpoint of the OpenID Provider of a sandbox organisation. It works like the endpoint of the main organisation; the path holds the ID of the sandbox organisation after the ID of the organisation.

Returns the sub and the presented claims of the person who logged in. Send the access token of the token endpoint as Authorization: Bearer <access_token>. The endpoint takes GET and POST and gives the same answer.

The access token works while it is valid (5 minutes) and the login session is open (15 minutes from the authorisation request). Error answers of the provider have an empty body; the WWW-Authenticate header holds the reason.

UserInfo endpoint

Language of the request sample

curl -X POST 'https://demo-api.igrant.io/v4/service/platform/extension/oidc/{organisationId}/{sandboxOrgId}/userinfo' \
  -H 'Authorization: Bearer <access-token>'

{
  "sub": "[email protected]",
  "presentation": {
    "0": {
      "iss": "urn:ietf:params:oauth:jwk-thumbprint:sha-256:NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs",
      "vct": "io.igrant.authenticator",
      "iat": 1794146400,
      "exp": 1794182400,
      "email_address": "[email protected]"
    }
  }
}

Authorizations

Authorizationstringheaderrequired
An access token: Bearer <access-token>.

Path parameters

organisationIdstringrequired
The ID of the organisation
sandboxOrgIdstringrequired
Unique identifier of the sandbox organisation.

Response

application/json

The identifier and the claims of the person.

substring
The identifier of the person, resolved with the identity matching attributes or the callback of the client.
Example:"[email protected]"
presentationobject
The presented credentials. It is an object, not an array: each key is the index of a presentation as a string, from "0". Each value holds the claims of that presentation; its content depends on the credential format.