| Endpoint | Description |
|---|
GET /.well-known/openid-configuration | OIDC Discovery |
GET /.well-known/jwks.json | JSON Web Key Set |
GET /authorize | Authorization endpoint (login page) |
POST /token | Token endpoint |
GET/POST /userinfo | UserInfo endpoint |
POST /introspect | Token Introspection (RFC 7662) |
POST /revoke | Token Revocation (RFC 7009) |
GET/POST /logout | OIDC End Session / Logout |
POST /device_authorization | Device Authorization (RFC 8628) |
GET/POST /device | Device verification page |
curl examples for every grant are in
Requesting tokens.
| Endpoint | Description |
|---|
GET /saml/metadata | IdP Metadata |
GET/POST /saml/sso | Single Sign-On (supports both HTTP-POST and HTTP-Redirect bindings) |
POST /saml/attribute-query | Attribute Query |
Bindings, strict-binding mode, response signing, and canonicalization are
covered in SAML options.
| Endpoint | Description |
|---|
GET /api/health | Health check |
GET /api/users | List users |
GET /api/users/{username} | Get user details |
POST /api/users/{username}/token | Generate token |
GET /api/audit | Get audit log |
POST /api/config/reload | Reload configuration |
POST /api/keys/rotate | Rotate cryptographic keys |
GET /api/keys/info | Get key information |