Openid configuration endpoint
An OpenID configuration endpoint is a standardized endpoint that publishes an OpenID Connect provider's metadata, supported endpoints, and protocol configuration.
Software Security for Developers
An OpenID configuration endpoint is a standardized endpoint that publishes an identity provider's OpenID Connect metadata and service endpoints.
- How it is used
- Discovers an identity provider’s service URLs before a client begins OpenID Connect authorization.
- How deep it goes
- Defines the well-known path and key response fields, then leaves authorization requests and token exchange to subsequent steps.
- Examples
- Uses localhost:9000 discovery metadata containing /oauth2/authorize and /oauth2/token.
- What you can do after
- Operate an OIDC client by retrieving provider metadata and using its discovered authorization and token endpoints.
Read how Software Security for Developers explains openid configuration endpoint →
Spring Security in Action, Second Edition
An OpenID configuration endpoint publishes an OpenID Connect provider's supported endpoints and protocol configuration metadata.
- How it is used
- Supports client discovery of authorization-server endpoints before an OAuth 2 authorization-code flow.
- How deep it goes
- Defines the discovery request and response metadata, but does not detail endpoint implementation.
- Examples
- Uses a localhost discovery URL, a JSON metadata response, and subsequent authorization-code requests.
- What you can do after
- Operate an authorization-code client by discovering endpoint paths and supported protocol capabilities.
Read how Spring Security in Action, Second Edition explains openid configuration endpoint →
Related concepts
- authorization endpointproduces · An authorization endpoint is an identity provider endpoint where a client initiates user authorization and authentication to obtain an authorization result.
- authorization serverhas part · An authorization server is an OAuth component that authenticates clients or resource owners, obtains authorization, and issues credentials such as authorization codes and access tokens.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.