Sign in

v1

latestSwagger 2.02026-07-1772026.5 KB
OpenID Connect

GetOpenIdProviderConfig

Endpoint used by participants to discover the CDR Register OpenID configuration and obtain information needed to interact with it, including its OAuth 2.0 endpoint locations.

get/.well-known/openid-configuration

Response

The OpenID Provider Configuration Metadata values

issuerstring required

URL using the https scheme with no query or fragment component that the CDR Register asserts as its Issuer Identifier

jwks_uristring required

URL of the CDR Register's JSON Web Key Set [JWK] document. This contains the signing key(s) used to validate access tokens issued from the CDR Register. Note that this differs from the JWKS endpoint used to validate SSAs and CDR Register client authentication

token_endpointstring required

URL of the CDR Register's OAuth 2.0 Token Endpoint

claims_supportedstring[] required

JSON array containing a list of the Claim Names of the Claims that the CDR Register supplies values for

id_token_signing_alg_values_supportedstring[] required

JSON array containing a list of the JWS signing algorithms (alg values) supported by the CDR Register for the ID Token to encode the Claims in a JWT. Given the CDR Register does not issue ID tokens, this field can be safely ignored

subject_types_supportedstring[] required

JSON array containing a list of the Subject Identifier types that the CDR Register supports. Given the CDR Register does not issue ID tokens, this field can be safely ignored

code_challenge_methods_supportedstring[] required

JSON array containing a list of Proof Key for Code Exchange (PKCE) [RFC7636] code challenge methods supported by this authorization server. Given the CDR Register does not support PKCE, this field can be safely ignored

scopes_supportedstring[] required

JSON array containing a list of the OAuth 2.0 [RFC6749] scope values that the CDR Register supports

response_types_supportedstring[] required

JSON array containing a list of the OAuth 2.0 response_type values that the CDR Registrer supports

grant_types_supportedstring[] required

JSON array containing a list of the OAuth 2.0 Grant Type values that the CDR Register supports

token_endpoint_auth_methods_supportedstring[] required

JSON array containing a list of Client Authentication methods supported by this Token Endpoint

tls_client_certificate_bound_access_tokensboolean required

Boolean value indicating server support for mutual TLS client certificate bound access tokens

request_object_signing_alg_values_supportedstring[] required

JSON array containing a list of the JWS signing algorithms (alg values) supported by the CDR Register for Request Objects.

All 7 operations