OpenID Connect
OpenID Connect protocol endpoints (OIDC Core, RP-Initiated Logout).
Endpoints
- OpenID Connect UserInfo endpointGET
/userinfoReturns claims for the subject identified by the presented access token (OIDC Core §5.3). The access token is presented as a Bearer credential, or as a DPoP credential together with a DPoP proof (RFC 9449). - OpenID Connect UserInfo endpoint (POST)POST
/userinfoThe POST form of the UserInfo endpoint (OIDC Core §5.3.1). - RP-Initiated Logout (OpenID Connect)GET
/end_sessionLogs the end user out at the OP. If a valid, exactly-registered post_logout_redirect_uri is supplied, the OP redirects the user agent there with state appended; otherwise a logged-out page is shown. The OP never redirects to an unregistered URI. - RP-Initiated Logout, form-encoded (RP-Initiated Logout 1.0 §2)POST
/end_sessionIdentical to the GET form in every respect except where the parameters travel. Preferred by relying parties that do not want an id_token_hint in a URL. - OP session-management iframe (OIDC Session Management 1.0 §3.2)GET
/check_session_iframeServes the OP iframe an RP embeds to poll the end user's login status at the provider without network traffic. It accepts postMessage payloads of the form <client_id> <session_state> from the RP iframe and posts back unchanged, changed, or error.