v1

latestOpenAPI 3.0.2Mozilla Public License 2.02026-07-17307105155.2 KB

identity

CRUD operations for OIDC keys.

post/identity/oidc/key/{name}

algorithmstring

Signing algorithm to use. This will default to RS256.

allowed_client_idsstring[]

Comma separated string or array of role client ids allowed to use this key for signing. If empty no roles are allowed. If "*" all roles are allowed.

rotation_periodinteger

How often to generate a new keypair.

verification_ttlinteger

Controls how long the public portion of a key will be available for verification after being rotated.