Skip to main content
GET
Get the OpenID configuration
Authentication is new. These endpoints are served by your application’s issuer, such as https://<name>.auth.didit.me, and never take your Didit API key.
Fetch discovery from the issuer you configured, never from a URL you read in a token. The response can be cached for 5 minutes. See Tokens and JWKS for what each field means for your integration.

Response

The discovery document.

The issuer's OpenID Connect discovery document. Read endpoints from here rather than building them.

issuer
string<uri>
required

The issuer: the application's sign-in origin, without a trailing slash. Every token's iss equals it.

Example:

"https://your-app.auth.didit.me"

authorization_endpoint
string<uri>
required

The hosted sign-in page (/sign-in).

Example:

"https://your-app.auth.didit.me/sign-in"

token_endpoint
string<uri>
required
Example:

"https://your-app.auth.didit.me/token/"

jwks_uri
string<uri>
required
Example:

"https://your-app.auth.didit.me/.well-known/jwks.json"

response_types_supported
string[]
required
Example:
response_modes_supported
string[]
required
Example:
grant_types_supported
string[]
required
Example:
subject_types_supported
string[]
required
Example:
id_token_signing_alg_values_supported
string[]
required
Example:
token_endpoint_auth_methods_supported
string[]
required

none: clients are public and send no secret.

Example:
code_challenge_methods_supported
string[]
required
Example:
scopes_supported
string[]
required
Example:
claims_supported
string[]
required
Example: