Skip to main content

Metadata handling

The Metadata handling endpoints publish machine-readable discovery documents and cryptographic key material for OAuth 2.0, OpenID Connect, and SAML relying parties. The /.well-known/openid-configuration endpoint implements RFC 8414, returning a JSON document with the authorization server's endpoint URIs and capabilities. The /.well-known/jwks.json endpoint exposes the public keys used to sign and encrypt tokens, following RFC 7517, enabling relying parties to verify JWT signatures without a direct exchange with the token issuer. Both services derive their configuration from the AuthorizationServer AuthStates configured in the nevisAuth instance.

Last updated on