ORory
oAuth2

Get Trusted OAuth2 JWT Bearer Grant Type Issuer

Changed on

Use this endpoint to get a trusted JWT Bearer Grant Type Issuer. The ID is the one returned when you created the trust relationship.

get/admin/trust/grants/jwt-bearer/issuers/{id}

Request

  • Base URL
    / (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /admin/trust/grants/jwt-bearer/issuers/{id}
  • Auth
    none declared

Path parameters

idstring required

The id of the desired grant

Response

trustedOAuth2JwtGrantIssuer

allow_any_subjectboolean

The "allow_any_subject" indicates that the issuer is allowed to have any principal as the subject of the JWT.

created_atstring date-time

The "created_at" indicates, when grant was created.

expires_atstring date-time

The "expires_at" indicates, when grant will expire, so we will reject assertion from "issuer" targeting "subject".

idstring
issuerstring

The "issuer" identifies the principal that issued the JWT assertion (same as "iss" claim in JWT).

scopestring[]

The "scope" contains list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749])

subjectstring

The "subject" identifies the principal that is the subject of the JWT.

Example response

{
  "public_key": {
    "set": "https://jwt-idp.example.com",
    "kid": "123e4567-e89b-12d3-a456-426655440000"
  },
  "expires_at": "2000-01-23T04:56:07.000+00:00",
  "subject": "mike@example.com",
  "scope": [
    "openid",
    "offline"
  ],
  "created_at": "2000-01-23T04:56:07.000+00:00",
  "id": "9edc811f-4e28-453c-9b46-4de65f00217f",
  "allow_any_subject": true,
  "issuer": "https://jwt-idp.example.com"
}

Changes