Sign in

v28

latestOpenAPI 3.1.0raw.githubusercontent.com2026-06-263064641.4 MB
Auth Server

Create a new auth server

Create a new auth server. Each auth server has a unique, randomly generated, public issuer URL.

post/v1/auth-servers

Request body

namestring required

The name of the auth server

descriptionstring

The description of the auth server

audiencestring required

The recipients that the tokens are intended for. This becomes the 'aud' claim in an access token

signing_algorithm'RS256' | 'RS384' | 'RS512' | 'PS256' | 'PS384' | 'PS512'

Algorithm used in the key signing process

labelsLabels

Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

trusted_originsTrustedOrigin[]

A list or trusted origins to apply the CORS header on for the auth server

dcr_default_access_token_durationinteger

The default access token duration, in seconds, applied to DCR clients registered against this auth server

Example request

{
  "labels": {
    "env": "test"
  },
  "trusted_origins": [
    "https://example.com"
  ]
}

Response

An auth server

idstring uuid required

The ID of the auth server

namestring required

The name of the auth server

descriptionstring required

The description of the auth server

audiencestring required

The recipients that the tokens are intended for. This becomes the 'aud' claim in an access token

signing_algorithm'RS256' | 'RS384' | 'RS512' | 'PS256' | 'PS384' | 'PS512' required

Algorithm used in the key signing process

issuerstring required

The complete URL for the custom authorization server. This becomes the 'iss' claim in an access token.

metadata_uristring uri required

The URI of the metadata document for the auth server

labelsLabels required

Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

created_atstring date-time required

An ISO-8601 timestamp representation of entity creation date.

updated_atstring date-time required

An ISO-8601 timestamp representation of entity update date.

trusted_originsTrustedOrigin[]

A list or trusted origins to apply the CORS header on for the auth server

dcr_default_access_token_durationinteger

The default access token duration, in seconds, applied to DCR clients registered against this auth server

Example response

{
  "labels": {
    "env": "test"
  },
  "created_at": "2022-11-04T20:10:06.927Z",
  "updated_at": "2022-11-04T20:10:06.927Z",
  "trusted_origins": [
    "https://example.com"
  ]
}