Account Management

OpenID Connect authentication

Changed on

Lists the supported OpenID Connect providers (OP). OpenID Connect Providers MUST support OpenID Connect Discovery.

It is highly RECOMMENDED to implement OpenID Connect for public services in favor of Basic authentication.

openEO clients MUST use the access token as part of the Bearer token for authorization in subsequent API calls (see also the information about Bearer tokens in this document). Clients MUST NOT use the id token or the authorization code.

Back-ends MAY request user information (including Claims) from the OpenID Connect Userinfo endpoint using the access token (without the prefix described above). Therefore, both openEO client and openEO back-end are relying parties (clients) to the OpenID Connect Provider.

get/credentials/oidc

Request

  • Base URL
    https://openeo.example/api/v1
  • Auth
    none required

Response

Lists the OpenID Connect Providers.

Example response

{
  "providers": [
    {
      "issuer": "https://accounts.google.com",
      "authorization_parameters": {
        "prompt": "consent",
        "access_type": "offline"
      },
      "links": [
        {
          "rel": "related",
          "href": "https://openeo.example",
          "type": "text/html",
          "title": "openEO"
        }
      ]
    }
  ]
}

Changes

    • info

      added the optional property // to the response with the status

    • warning

      removed the optional property // from the response with the status