Openid configuration endpoint

As explained in Spring Security in Action, Second Edition

An OpenID configuration endpoint publishes an OpenID Connect provider's supported endpoints and protocol configuration metadata.

http://localhost:8080/.well-known/openid-configuration

How Spring Security in Action, Second Edition covers it

How deep it goes

Defines the discovery request and response metadata, but does not detail endpoint implementation.

Examples

Uses a localhost discovery URL, a JSON metadata response, and subsequent authorization-code requests.

What it assumes

Assumes familiarity with registered clients and authorization-code flows while demonstrating discovery before client requests.

What you can do after

Operate an authorization-code client by discovering endpoint paths and supported protocol capabilities.

How it connects

Connects authorization endpoints, token endpoints, JWKS endpoints, userinfo endpoints, and authorization-code grants.

liveBookmanning.com

Read Spring Security in Action, Second Edition on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Software Security for DevelopersAn OpenID configuration endpoint is a standardized endpoint that publishes an identity provider's OpenID Connect metadata and service endpoints.

Compare how 2 books explain openid configuration endpoint →

Related concepts

• authorization endpointproduces · An authorization endpoint is an identity provider endpoint where a client initiates user authorization and authentication to obtain an authorization result.
• authorization serverhas part · An authorization server is an OAuth component that authenticates clients or resource owners, obtains authorization, and issues credentials such as authorization codes and access tokens.

This explainer was generated by Manning's knowledge graph from the text of Spring Security in Action, Second Edition. The section links point to the parts of the book it draws on.