ShareAI Platform Docs

Read identity and discover Auth endpoints

Use ShareAI Auth discovery, JWKS and UserInfo to validate application sign-in and read the identity permitted by an OAuth access token.

View as Markdown
On this page

Discover the issuer#

GET https://auth.shareai.now/.well-known/openid-configuration

Read OpenID Connect metadata.

Base URL
https://auth.shareai.now
Authentication
No credential

cURL

curl --fail-with-body https://auth.shareai.now/.well-known/openid-configuration

Read the issuer, authorization endpoint, token endpoint, UserInfo endpoint and JWKS URI from discovery. Validate the issuer against your configured ShareAI issuer; do not trust a discovery URL supplied by an arbitrary user.

Read the approved account identity#

GET https://auth.shareai.now/oauth/userinfo

Read claims allowed by the granted scopes.

Base URL
https://auth.shareai.now
Authentication
Bearer OAuth access token
Required scope
openid

cURL

curl --fail-with-body https://auth.shareai.now/oauth/userinfo \
  -H "Authorization: Bearer $SHAREAI_ACCESS_TOKEN"

Use sub as an opaque client-specific account identifier. profile and email affect optional claims. Organization authorizations intentionally omit the approving person’s private profile details.

Validate an ID token#

Use a maintained OpenID Connect library. Validate the token signature with the discovered JWKS, the exact issuer, your client ID as audience, expiry and the nonce saved before authorization. Do not accept a decoded JWT as proof until these checks pass.

Other discovery routes#

Method and pathPurpose
GET /.well-known/oauth-authorization-serverOAuth authorization-server metadata.
GET /.well-known/jwks.jsonPublic signing keys.
GET /oauth/meAuthenticated account identity endpoint.

Last updated September 15, 2026

ShareAI Platform Docs
All documentation

Search by title or content.

Ask about this page

Choose an assistant to explore this page. You can also copy the page and paste it into your conversation.

Ask ChatGPTAsk ClaudeAsk GrokAsk ShareAI