Waca identitas lan temokake titik akhir Auth
Gunakake ShareAI Auth discovery, JWKS lan UserInfo kanggo validasi mlebu aplikasi lan maca identitas sing diidini dening token akses OAuth.
Ing kaca iki
Temokake penerbit#
https://auth.shareai.now/.well-known/openid-configurationWaca metadata OpenID Connect.
- URL Dasar
https://auth.shareai.now- Otentikasi
- Ora ana kredensial
cURL
curl --fail-with-body https://auth.shareai.now/.well-known/openid-configuration
Waca issuer, endpoint otorisasi, endpoint token, endpoint UserInfo lan URI JWKS saka penemuan. Validasi issuer marang issuer ShareAI sing wis dikonfigurasi; aja percaya URL penemuan sing diwenehake dening pangguna sembarang.
Waca identitas akun sing disetujui#
https://auth.shareai.now/oauth/userinfoWaca klaim sing diijini dening lingkup sing diwenehake.
- URL Dasar
https://auth.shareai.now- Otentikasi
- Token akses OAuth Bearer
- Lingkup sing dibutuhake
openid
cURL
curl --fail-with-body https://auth.shareai.now/oauth/userinfo \
-H "Authorization: Bearer $SHAREAI_ACCESS_TOKEN"
Gunakake sub minangka pengenal akun spesifik-klien sing ora transparan. profile lan email mengaruhi klaim opsional. Otorisasi organisasi kanthi sengaja ora nyakup rincian profil pribadi wong sing nyetujui.
Validasi token ID#
Gunakake perpustakaan OpenID Connect sing dijaga. Validasi tandha tangan token nganggo JWKS sing ditemokake, issuer sing tepat, ID klien sampeyan minangka audiens, kadaluwarsa lan nonce sing disimpen sadurunge otorisasi. Aja nampa JWT sing wis didekode minangka bukti nganti pemeriksaan iki lulus.
Rute penemuan liyane#
| Metode lan jalur | Tujuan |
|---|---|
GET /.well-known/oauth-authorization-server | Metadata server otorisasi OAuth. |
GET /.well-known/jwks.json | Kunci tandha tangan umum. |
GET /oauth/me | Endpoint identitas akun sing diautentikasi. |
Paling anyar dianyari Septèmber 15, 2026