v1

latestOpenAPI 3.0.3Apache 2.02026-07-175068227.4 KB

oAuth2

List Trusted OAuth2 JWT Bearer Grant Type Issuers

Use this endpoint to list all trusted JWT Bearer Grant Type Issuers.

get/admin/trust/grants/jwt-bearer/issuers

Query parameters

page_sizeinteger

Items per Page

This is the number of items per page to return. For details on pagination please head over to the pagination documentation.

page_tokenstring

Next Page Token

The next page token. For details on pagination please head over to the pagination documentation.

issuerstring

If optional "issuer" is supplied, only jwt-bearer grants with this issuer will be returned.

Response

trustedOAuth2JwtGrantIssuers

allow_any_subjectboolean

The "allow_any_subject" indicates that the issuer is allowed to have any principal as the subject of the JWT.

created_atstring date-time

The "created_at" indicates, when grant was created.

expires_atstring date-time

The "expires_at" indicates, when grant will expire, so we will reject assertion from "issuer" targeting "subject".

idstring

issuerstring

The "issuer" identifies the principal that issued the JWT assertion (same as "iss" claim in JWT).

scopestring[]

The "scope" contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])

subjectstring

The "subject" identifies the principal that is the subject of the JWT.

Example response

[
  {
    "public_key": {
      "set": "https://jwt-idp.example.com",
      "kid": "123e4567-e89b-12d3-a456-426655440000"
    },
    "expires_at": "2000-01-23T04:56:07.000+00:00",
    "subject": "mike@example.com",
    "scope": [
      "openid",
      "offline"
    ],
    "created_at": "2000-01-23T04:56:07.000+00:00",
    "id": "9edc811f-4e28-453c-9b46-4de65f00217f",
    "allow_any_subject": true,
    "issuer": "https://jwt-idp.example.com"
  }
]