---
title: "Retrieve oxauth configuration"
method: GET
path: "/configuration/oxauth"
---

# Retrieve oxauth configuration

`GET /configuration/oxauth`

Retrieve oxauth configuration

## Response `200`

success

- OxAuthJsonConfiguration
  - `issuer` string
  - `baseEndpoint` string
  - `authorizationEndpoint` string
  - `tokenEndpoint` string
  - `tokenRevocationEndpoint` string
  - `userInfoEndpoint` string
  - `clientInfoEndpoint` string
  - `checkSessionIFrame` string
  - `endSessionEndpoint` string
  - `jwksUri` string
  - `registrationEndpoint` string
  - `openIdDiscoveryEndpoint` string
  - `openIdConfigurationEndpoint` string
  - `idGenerationEndpoint` string
  - `introspectionEndpoint` string
  - `umaConfigurationEndpoint` string
  - `sectorIdentifierEndpoint` string
  - `oxElevenGenerateKeyEndpoint` string
  - `oxElevenSignEndpoint` string
  - `oxElevenVerifySignatureEndpoint` string
  - `oxElevenDeleteKeyEndpoint` string
  - `oxElevenJwksEndpoint` string
  - `openidSubAttribute` string
  - `responseTypesSupported` array[]
    - string[]
  - `grantTypesSupported` string[]
  - `subjectTypesSupported` string[]
  - `defaultSubjectType` string
  - `userInfoSigningAlgValuesSupported` string[]
  - `userInfoEncryptionAlgValuesSupported` string[]
  - `userInfoEncryptionEncValuesSupported` string[]
  - `idTokenSigningAlgValuesSupported` string[]
  - `idTokenEncryptionAlgValuesSupported` string[]
  - `idTokenEncryptionEncValuesSupported` string[]
  - `requestObjectSigningAlgValuesSupported` string[]
  - `requestObjectEncryptionAlgValuesSupported` string[]
  - `requestObjectEncryptionEncValuesSupported` string[]
  - `tokenEndpointAuthMethodsSupported` string[]
  - `tokenEndpointAuthSigningAlgValuesSupported` string[]
  - `dynamicRegistrationCustomAttributes` string[]
  - `displayValuesSupported` string[]
  - `claimTypesSupported` string[]
  - `serviceDocumentation` string
  - `claimsLocalesSupported` string[]
  - `idTokenTokenBindingCnfValuesSupported` string[]
  - `uiLocalesSupported` string[]
  - `dynamicGrantTypeDefault` string[]
  - `claimsParameterSupported` boolean
  - `requestParameterSupported` boolean
  - `requestUriParameterSupported` boolean
  - `requireRequestUriRegistration` boolean
  - `allowPostLogoutRedirectWithoutValidation` boolean
  - `introspectionAccessTokenMustHaveUmaProtectionScope` boolean
  - `opPolicyUri` string
  - `opTosUri` string
  - `authorizationCodeLifetime` integer
  - `refreshTokenLifetime` integer
  - `idTokenLifetime` integer
  - `accessTokenLifetime` integer
  - `umaResourceLifetime` integer
  - `sessionAsJwt` boolean
  - `umaRptLifetime` integer
  - `umaTicketLifetime` integer
  - `umaPctLifetime` integer
  - `umaAddScopesAutomatically` boolean
  - `umaValidateClaimToken` boolean
  - `umaGrantAccessIfNoPolicies` boolean
  - `umaRestrictResourceToAssociatedClient` boolean
  - `umaKeepClientDuringResourceSetRegistration` boolean
  - `umaRptAsJwt` boolean
  - `cleanServiceInterval` integer
  - `keyRegenerationEnabled` boolean
  - `keyRegenerationInterval` integer
  - `defaultSignatureAlgorithm` string
  - `oxOpenIdConnectVersion` string
  - `organizationInum` string
  - `oxId` string
  - `dynamicRegistrationEnabled` boolean
  - `dynamicRegistrationExpirationTime` integer
  - `dynamicRegistrationPersistClientAuthorizations` boolean
  - `trustedClientEnabled` boolean
  - `skipAuthorizationForOpenIdScopeAndPairwiseId` boolean
  - `dynamicRegistrationScopesParamEnabled` boolean
  - `dynamicRegistrationCustomObjectClass` string
  - `personCustomObjectClassList` string[]
  - `persistIdTokenInLdap` boolean
  - `persistRefreshTokenInLdap` boolean
  - `authenticationFiltersEnabled` boolean
  - `invalidateSessionCookiesAfterAuthorizationFlow` boolean
  - `clientAuthenticationFiltersEnabled` boolean
  - `authenticationFilters` AuthenticationFilter[]
    - `filter` string
    - `bind` boolean
    - `bindPasswordAttribute` string
    - `baseDn` string
  - `clientAuthenticationFilters` ClientAuthenticationFilter[]
    - `filter` string
    - `bind` string
    - `bindPasswordAttribute` string
    - `baseDn` string
  - `configurationInum` string
  - `sessionIdUnusedLifetime` integer
  - `sessionIdUnauthenticatedUnusedLifetime` integer
  - `sessionIdEnabled` boolean
  - `sessionIdPersistOnPromptNone` boolean
  - `sessionIdLifetime` integer
  - `configurationUpdateInterval` integer
  - `cssLocation` string
  - `jsLocation` string
  - `imgLocation` string
  - `metricReporterInterval` integer
  - `metricReporterKeepDataDays` integer
  - `pairwiseIdType` string
  - `pairwiseCalculationKey` string
  - `pairwiseCalculationSalt` string
  - `shareSubjectIdBetweenClientsWithSameSectorId` boolean
  - `webKeysStorage` string
  - `dnName` string
  - `keyStoreFile` string
  - `keyStoreSecret` string
  - `endSessionWithAccessToken` boolean
  - `clientWhiteList` string[]
  - `clientBlackList` string[]
  - `legacyIdTokenClaims` boolean
  - `customHeadersWithAuthorizationResponse` boolean
  - `frontChannelLogoutSessionSupported` boolean
  - `updateUserLastLogonTime` boolean
  - `updateClientAccessTime` boolean
  - `enableClientGrantTypeUpdate` boolean
  - `corsConfigurationFilters` CorsConfigurationFilter[]
    - `filterName` string
    - `corsAllowedOrigins` string
    - `corsAllowedMethods` string
    - `corsAllowedHeaders` string
    - `corsExposedHeaders` string
    - `corsSupportCredentials` boolean
    - `corsLoggingEnabled` boolean
    - `corsPreflightMaxAge` integer
    - `corsRequestDecorate` boolean
  - `logClientIdOnClientAuthentication` boolean
  - `logClientNameOnClientAuthentication` boolean
  - `httpLoggingEnabled` boolean
  - `httpLoggingExludePaths` object[]
  - `externalLoggerConfiguration` string
  - `authorizationRequestCustomAllowedParameters` string[]
  - `legacyDynamicRegistrationScopeParam` boolean
  - `openidScopeBackwardCompatibility` boolean
  - `useCacheForAllImplicitFlowObjects` boolean
  - `disableU2fEndpoint` boolean
  - `authenticationProtectionConfiguration` AuthenticationProtectionConfiguration
    - `attemptExpiration` integer
    - `maximumAllowedAttemptsWithoutDelay` integer
    - `delayTime` integer
    - `bruteForceProtectionEnabled` boolean
  - `fido2Configuration` Fido2Configuration
    - `authenticatorCertsFolder` string
    - `mdsCertsFolder` string
    - `mdsTocsFolder` string
    - `serverMetadataFolder` string
    - `checkU2fAttestations` boolean
    - `userAutoEnrollment` boolean
    - `unfinishedRequestExpiration` integer
    - `authenticationHistoryExpiration` integer
    - `disableFido2` boolean
  - `loggingLevel` string
  - `errorHandlingMethod` string
  - `cookieDomain` string

## Other responses

- `500` — Server error

---

[API](https://skmtc.net/gluufederation/apis/oxtrust-api.md) · [All operations](https://skmtc.net/gluufederation/apis/oxtrust-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gluufederation/oxtrust-api/versions/283dde2d4ad4/schema)