Code in

Discovery document

Where every other endpoint is, and what the provider supports: scopes, claims, grants, algorithms and client authentication methods.

GET https://accounts.aton-network.org/.well-known/openid-configuration

When to use it

Read it when your app starts, and let your OpenID Connect library configure itself from it. Never hard-code the other addresses.

Authentication

None. It is public.

Parameters

None.

Request

# Read the discovery document: every endpoint, scope and algorithm the provider supports.
curl https://accounts.aton-network.org/.well-known/openid-configuration

Response

http

HTTP 200
content-type: application/json

{
  "issuer": "https://accounts.aton-network.org",
  "authorization_endpoint": "https://accounts.aton-network.org/oauth/authorize",
  "token_endpoint": "https://accounts.aton-network.org/oauth/token",
  "userinfo_endpoint": "https://accounts.aton-network.org/oauth/userinfo",
  "revocation_endpoint": "https://accounts.aton-network.org/oauth/revoke",
  "jwks_uri": "https://accounts.aton-network.org/.well-known/jwks.json",
  "scopes_supported": ["openid", "profile", "email", "offline_access", "age", "membership", "wallet", "licences", "creator"],
  "response_types_supported": ["code"],
  "grant_types_supported": ["authorization_code", "refresh_token"],
  "subject_types_supported": ["public", "pairwise"],
  "id_token_signing_alg_values_supported": ["ES256"],
  "token_endpoint_auth_methods_supported": ["client_secret_basic", "client_secret_post", "none", "private_key_jwt"],
  "token_endpoint_auth_signing_alg_values_supported": ["ES256", "RS256"],
  "code_challenge_methods_supported": ["S256"],
  "claims_supported": ["sub", "iss", "aud", "exp", "iat", "nonce", "sid", "email", "email_verified", "name", "creator", "plan", "age", "membership", "wallets"],
  "code_challenge_required": true
}

Errors

This endpoint returns no errors of its own; a fault at our end is a 5xx.

Good to know

The issuer is exactly https://accounts.aton-network.org, with no trailing slash. Compare it byte for byte with the iss of every ID token.
Cache it for up to a day. It changes only when we add a scope, a claim or a method.

Security

Fetch it over https only, and never from an address a user gave you.

Try it

Read it in the sandbox.

Ask Atlas

AI assistant

Ask anything about Sign in with Atheron, the API or the portal. You get an answer from our docs, with links to the pages it used.