View Source ShinAuth.OIDC.ProviderConfiguration.Metadata (shin_auth v1.3.0)

OpenID Connect Provider Configuration

For details on the fields see:

Summary

Types

@type t() :: %ShinAuth.OIDC.ProviderConfiguration.Metadata{
  acr_values_supported: [String.t()] | :undefined,
  authorization_encryption_alg_values_supported: [String.t()] | :undefined,
  authorization_encryption_enc_values_supported: [String.t()] | :undefined,
  authorization_endpoint: :uri_string.uri_string(),
  authorization_response_iss_parameter_supported: boolean(),
  authorization_signing_alg_values_supported: [String.t()] | :undefined,
  claim_types_supported: [:normal | :aggregated | :distributed],
  claims_locales_supported: [String.t()] | :undefined,
  claims_parameter_supported: boolean(),
  claims_supported: [String.t()] | :undefined,
  code_challenge_methods_supported: [String.t()] | :undefined,
  display_values_supported: [String.t()] | :undefined,
  dpop_signing_alg_values_supported: [String.t()] | :undefined,
  end_session_endpoint: :uri_string.uri_string() | :undefined,
  extra_fields: %{required(String.t()) => term()},
  grant_types_supported: [String.t()],
  id_token_encryption_alg_values_supported: [String.t()] | :undefined,
  id_token_encryption_enc_values_supported: [String.t()] | :undefined,
  id_token_signing_alg_values_supported: [String.t()],
  introspection_endpoint: :uri_string.uri_string() | :undefined,
  introspection_endpoint_auth_methods_supported: [String.t()],
  introspection_endpoint_auth_signing_alg_values_supported:
    [String.t()] | :undefined,
  issuer: :uri_string.uri_string(),
  jwks_uri: :uri_string.uri_string() | :undefined,
  mtls_endpoint_aliases: %{required(binary()) => :uri_string.uri_string()},
  op_policy_uri: :uri_string.uri_string() | :undefined,
  op_tos_uri: :uri_string.uri_string() | :undefined,
  pushed_authorization_request_endpoint: :uri_string.uri_string() | :undefined,
  registration_endpoint: :uri_string.uri_string() | :undefined,
  request_object_encryption_alg_values_supported: [String.t()] | :undefined,
  request_object_encryption_enc_values_supported: [String.t()] | :undefined,
  request_object_signing_alg_values_supported: [String.t()] | :undefined,
  request_parameter_supported: boolean(),
  request_uri_parameter_supported: boolean(),
  require_pushed_authorization_requests: boolean(),
  require_request_uri_registration: boolean(),
  require_signed_request_object: boolean(),
  response_modes_supported: [String.t()],
  response_types_supported: [String.t()],
  revocation_endpoint: :uri_string.uri_string() | :undefined,
  revocation_endpoint_auth_methods_supported: [String.t()],
  revocation_endpoint_auth_signing_alg_values_supported:
    [String.t()] | :undefined,
  scopes_supported: [String.t()] | :undefined,
  service_documentation: :uri_string.uri_string() | :undefined,
  subject_types_supported: [:pairwise | :public],
  tls_client_certificate_bound_access_tokens: boolean(),
  token_endpoint: :uri_string.uri_string() | :undefined,
  token_endpoint_auth_methods_supported: [String.t()],
  token_endpoint_auth_signing_alg_values_supported: [String.t()] | :undefined,
  ui_locales_supported: [String.t()] | :undefined,
  userinfo_encryption_alg_values_supported: [String.t()] | :undefined,
  userinfo_encryption_enc_values_supported: [String.t()] | :undefined,
  userinfo_endpoint: :uri_string.uri_string() | :undefined,
  userinfo_signing_alg_values_supported: [String.t()] | :undefined
}