Discovery document
Where every other endpoint is, and what the provider supports: scopes, claims, grants, algorithms and client authentication methods.
Inicie sesión para ver su propio ID de cliente de prueba en los ejemplos.
GET https://accounts.aton-network.org/.well-known/openid-configuration
When to use it
Read it when your app starts, and let your OpenID Connect library configure itself from it. Never hard-code the other addresses.
Authentication
None. It is public.
Parameters
None.
Request
# Read the discovery document: every endpoint, scope and algorithm the provider supports.
curl https://accounts.aton-network.org/.well-known/openid-configurationResponse
http
HTTP 200
content-type: application/json
{
"issuer": "https://accounts.aton-network.org",
"authorization_endpoint": "https://accounts.aton-network.org/oauth/authorize",
"token_endpoint": "https://accounts.aton-network.org/oauth/token",
"userinfo_endpoint": "https://accounts.aton-network.org/oauth/userinfo",
"revocation_endpoint": "https://accounts.aton-network.org/oauth/revoke",
"jwks_uri": "https://accounts.aton-network.org/.well-known/jwks.json",
"scopes_supported": ["openid", "profile", "email", "offline_access", "age", "membership", "wallet", "licences", "creator"],
"response_types_supported": ["code"],
"grant_types_supported": ["authorization_code", "refresh_token"],
"subject_types_supported": ["public", "pairwise"],
"id_token_signing_alg_values_supported": ["ES256"],
"token_endpoint_auth_methods_supported": ["client_secret_basic", "client_secret_post", "none", "private_key_jwt"],
"token_endpoint_auth_signing_alg_values_supported": ["ES256", "RS256"],
"code_challenge_methods_supported": ["S256"],
"claims_supported": ["sub", "iss", "aud", "exp", "iat", "nonce", "sid", "email", "email_verified", "name", "creator", "plan", "age", "membership", "wallets"],
"code_challenge_required": true
}Errors
This endpoint returns no errors of its own; a fault at our end is a 5xx.
Good to know
- The issuer is exactly https://accounts.aton-network.org, with no trailing slash. Compare it byte for byte with the iss of every ID token.
- Cache it for up to a day. It changes only when we add a scope, a claim or a method.
Security
- Fetch it over https only, and never from an address a user gave you.
Try it
Pregunte a Atlas
Asistente de IAPregunte lo que quiera sobre Iniciar sesión con Atheron, la API o el portal. La respuesta sale de nuestra documentación, con enlaces a las páginas usadas.