2020-12-16 17:20:41 +00:00
[id="con-server-oidc-uri-endpoints_{context}"]
2021-06-17 14:39:30 +00:00
==== {project_name} server OIDC URI endpoints
2020-12-16 17:20:41 +00:00
[role="_abstract"]
2022-02-08 13:07:16 +00:00
The following is a list of OIDC endpoints that {project_name} publishes. These endpoints can be used when a non-{project_name} client adapter uses OIDC to communicate with the authentication server. They are all relative URLs. The root of the URL consists of the HTTP(S) protocol, hostname, and optionally the path: For example
2020-12-16 17:20:41 +00:00
[source, subs="attributes"]
----
2022-02-08 13:07:16 +00:00
https://localhost:8080{kc_base_path}
2020-12-16 17:20:41 +00:00
----
/realms/{realm-name}/protocol/openid-connect/auth::
Used for obtaining a temporary code in the Authorization Code Flow or obtaining tokens using the Implicit Flow, Direct Grants, or Client Grants.
/realms/{realm-name}/protocol/openid-connect/token::
Used by the Authorization Code Flow to convert a temporary code into a token.
/realms/{realm-name}/protocol/openid-connect/logout::
Used for performing logouts.
/realms/{realm-name}/protocol/openid-connect/userinfo::
Used for the User Info service described in the OIDC specification.
/realms/{realm-name}/protocol/openid-connect/revoke::
2021-06-17 14:39:30 +00:00
Used for OAuth 2.0 Token Revocation described in https://datatracker.ietf.org/doc/html/rfc7009[RFC7009].
2021-03-31 20:22:59 +00:00
/realms/{realm-name}/protocol/openid-connect/certs::
Used for the JSON Web Key Set (JWKS) containing the public keys used to verify any JSON Web Token (jwks_uri)
2021-06-17 14:39:30 +00:00
2021-03-31 20:22:59 +00:00
/realms/{realm-name}/protocol/openid-connect/auth/device::
Used for Device Authorization Grant to obtain a device code and a user code.
2022-04-14 00:37:15 +00:00
/realms/{realm-name}/protocol/openid-connect/ext/ciba/auth::
This is the URL endpoint for Client Initiated Backchannel Authentication Grant to obtain an auth_req_id that identifies the authentication request made by the client.
/realms/{realm-name}/protocol/openid-connect/logout/backchannel-logout::
This is the URL endpoint for performing backchannel logouts described in the OIDC specification.
2021-03-31 20:22:59 +00:00
In all of these, replace {realm-name} with the name of the realm.
