Discovery path & notes

Codefragmenten

curl "https://api.oanor.com/oidc-api/v1/meta" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/oidc-api/v1/meta", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/oidc-api/v1/meta");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/oidc-api/v1/meta",
    headers={"x-oanor-key": "oanor_test_..."}
)

Voorbeeldrespons

Een echte respons van dit endpoint, vastgelegd bij de laatste health check.

{
    "data": {
        "note": "Inspect any OpenID Connect / OAuth 2.0 provider. /v1/discover?issuer=https://accounts.google.com fetches the provider's discovery document at /.well-known/openid-configuration (pass an issuer, a bare domain, or the full discovery URL), parses every endpoint (authorization, token, userinfo, jwks, registration, end_session, introspection, revocation, device_authorization), the supported scopes, response types, grant types, signing algorithms, PKCE methods and claims, then fetches the JWKS and summarises its signing keys (count, algorithms, key types, key ids) and reports a validity check. /v1/jwks?url=... fetches and summarises any JSON Web Key Set on its own. The request is made server-side; private/internal targets are refused (SSRF-guarded). Ideal for SSO and OAuth/OIDC integration, IdP configuration debugging (Auth0, Okta, Keycloak, Azure AD, Google), security review and monitoring of signing-key rotation. An OIDC discovery/JWKS inspector — distinct from the JWT toolkit (jwt), the security.txt parser (securitytxt) and the HTTP security-header grader (secheaders). No key, no cache.",
        "endpoints": [
            "/v1/discover",
            "/v1/jwks",
            "/v1/meta"
        ],
        "discovery_path": "/.well-known/openid-configuration"
    },
    "meta": {
        "timestamp": "2026-06-01T23:40:47.736Z",
        "request_id": "9afea516-451b-4c86-8ecc-d1a1ed3d152d"
    },
    "status": "ok",
    "message": "Meta retrieved",
    "success": true
}