Sign in
instance

Create or reconfigure an OIDC provider.

Changed on

The issuer is immutable after create (A3): a changed issuer is refused. Discovery is re-run and the document's issuer must byte-equal the configured one. A reconfigure sweeps every session authenticated through the provider (A4).

put/api/v1/instance/oidc-providers/{slug}

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/instance/oidc-providers/{slug}
  • Auth: HTTP bearer

Request body

display_namestring required
issuerstring required

Byte-exact, immutable after create (A3).

client_idstring required
client_secretstring required

Envelope-encrypted at rest; never returned.

scopesstring required
assurance_policystring nullable

JSON {acr_values[], amr_sets[][]}; absent means single-factor.

enabledboolean required
row_versioninteger

Required for reconfiguration and omitted for create. A stale or deleted row returns 409.

Response

The created or reconfigured provider.

slugstring required
display_namestring required
issuerstring required
client_idstring required
scopesstring required
redirect_uristring required
assurance_policystring nullable
enabledboolean required
row_versioninteger required

Changes

  • f24ca8785e72Revision changes
    • info

      added the new optional request property

    • info

      added the required property to the response with the status

  • 54b2780eec85Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status