Code en

Discovery document

Where every other endpoint is, and what the provider supports: scopes, claims, grants, algorithms and client authentication methods.

Connectez-vous pour voir votre propre ID client de test dans les exemples.

GET https://accounts.aton-network.org/.well-known/openid-configuration

When to use it

Read it when your app starts, and let your OpenID Connect library configure itself from it. Never hard-code the other addresses.

Authentication

None. It is public.

Parameters

None.

Request

# Read the discovery document: every endpoint, scope and algorithm the provider supports.
curl https://accounts.aton-network.org/.well-known/openid-configuration

Response

http

HTTP 200
content-type: application/json

{
  "issuer": "https://accounts.aton-network.org",
  "authorization_endpoint": "https://accounts.aton-network.org/oauth/authorize",
  "token_endpoint": "https://accounts.aton-network.org/oauth/token",
  "userinfo_endpoint": "https://accounts.aton-network.org/oauth/userinfo",
  "revocation_endpoint": "https://accounts.aton-network.org/oauth/revoke",
  "jwks_uri": "https://accounts.aton-network.org/.well-known/jwks.json",
  "scopes_supported": ["openid", "profile", "email", "offline_access", "age", "membership", "wallet", "licences", "creator"],
  "response_types_supported": ["code"],
  "grant_types_supported": ["authorization_code", "refresh_token"],
  "subject_types_supported": ["public", "pairwise"],
  "id_token_signing_alg_values_supported": ["ES256"],
  "token_endpoint_auth_methods_supported": ["client_secret_basic", "client_secret_post", "none", "private_key_jwt"],
  "token_endpoint_auth_signing_alg_values_supported": ["ES256", "RS256"],
  "code_challenge_methods_supported": ["S256"],
  "claims_supported": ["sub", "iss", "aud", "exp", "iat", "nonce", "sid", "email", "email_verified", "name", "creator", "plan", "age", "membership", "wallets"],
  "code_challenge_required": true
}

Errors

This endpoint returns no errors of its own; a fault at our end is a 5xx.

Good to know

The issuer is exactly https://accounts.aton-network.org, with no trailing slash. Compare it byte for byte with the iss of every ID token.
Cache it for up to a day. It changes only when we add a scope, a claim or a method.

Security

Fetch it over https only, and never from an address a user gave you.

Try it

Read it in the sandbox.

Demandez à Atlas

Assistant IA

Posez n'importe quelle question sur Se connecter avec Atheron, l'API ou le portail. La réponse vient de notre documentation, avec les liens des pages utilisées.