---
title: "OpenID provider configuration information"
method: GET
path: "/.well-known/openid-configuration"
tags: ["Authentication"]
---

# OpenID provider configuration information

`GET /.well-known/openid-configuration`

## Request

- The document declares no server URL.
- Auth: API key in header `Authorization`

The OpenID Provider's configuration information can be retrieved.

## Response `200`

ok

- OauthProviderMetadata
  - `authorization_endpoint` string, required
  - `claims_supported` string[], required
  - `code_challenge_methods_supported` string[], required
  - `grant_types_supported` string[], required
  - `id_token_signing_alg_values_supported` string[], required
  - `issuer` string, required
  - `jwks_uri` string, required
  - `response_types_supported` string[], required
  - `scopes_supported` string[], required
  - `subject_types_supported` string[], required
  - `token_endpoint` string, required
  - `token_endpoint_auth_methods_supported` string[], required
  - `userinfo_endpoint` string, required

## Changes

- **2026-07-17** `0451c8cec9b1`: 1 info
  - endpoint added
- **2019-09-02** `6d6e730a2d14`: 1 breaking
  - api path removed without deprecation

[Operation history](https://skmtc.dev/kubesphere/apis/ks-api/changes/.well-known/openid-configuration/get.md)

---

[API](https://skmtc.dev/kubesphere/apis/ks-api.md) - [All operations](https://skmtc.dev/kubesphere/apis/ks-api/llms.txt) - [OpenAPI document](https://skmtc.dev/kubesphere/apis/ks-api/revisions/0451c8cec9b1?raw)