MOmoneyhubenterprise
auth

Pushed Authorization Request endpoint. Retrieve a request_uri that can be used with the oidc/auth endpoint. More info here: https://docs.moneyhubenterprise.com/docs/how-to-use-pushed-authorization-request-par-endpoint

post/oidc/request

Request

  • Base URL
    https://identity.moneyhub.co.uk
  • URL
    https://identity.moneyhub.co.uk/oidc/request
  • Auth
    HTTP basic

Request body application/x-www-form-urlencoded

client_idstring required

The client’s unique identifier.

scopestring required

The scopes being requested. Must include openid scope and the id:* scope.

redirect_uristring required

The redirect uri that the auth endpoint will redirect to on success. Will error if this does not match the redirect URI registered on the client.

response_type'code' | 'id_token' | 'token' | 'code id_token' | 'code token' | 'id_token token' | 'code id_token token' required

Specifies the desired response. Will error if the response type doesn't match any configured for the client.

claimsstring

Claims (as JSON string) give extra information on the authorisation flow and how connection should be made.

statestring

Opaque value used to maintain state between the request and the callback. Can prevent attacks such as CRSF.

noncestring

This is a security value that can prevent replay attacks.

client_assertionstring

A signed JWT. The sub and iss properties in the payload should be the clientId. The aud property should be the token endpoint. For use when doing a private key JWT auth.

client_assertion_typestring

For use when doing a private key JWT auth.

requeststring

A signed JWT containing all the authorization request parameters. If included, other individual parameters become optional as they are encapsulated in the JWT. Please check the description here https://docs.moneyhubenterprise.com/docs/using-request-parameter

Example request

{
  "client_id": "67e5c1ce-1a3b-4ca8-a2d8-49ab822dbc24",
  "scope": "openid id:1ffe704d39629a929c8e293880fb449a",
  "redirect_uri": "http://localhost:3001",
  "response_type": "code",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
  "request": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
}

Response

A successful response with request_uri

request_uristring

Access Token

expires_ininteger required

Request URI expiry

Example response

{
  "request_uri": "urn:ietf:params:oauth:request_uri:XqjKQPKBho2762E3_v1og",
  "expires_in": 60
}

Changes

No recorded changes to this operation across all 2 revisions of this API.