Discovery

External IdP login descriptor

Changed on

Public capability hint: whether IdP login is enabled, and which provider.

The SPA reads this before login to decide whether to show a "Continue with <provider>" button. Unauthenticated and secret-free — it advertises only the enabled flag and the provider name (never client secrets or endpoints).

get/auth/idp

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /auth/idp
  • Auth: none required

Response

Successful Response

object required

Changes