Ciresk Docs
API reference

OIDC

Each organisation as an OIDC issuer: its discovery document and the keys a cloud verifies a task's ID token with.

GET/v1/ci/oidc/{org}/.well-known/openid-configuration

Get the OIDC discovery

An organisation's oidc discovery document: the issuer of its tasks' id tokens and its key set.

No credential

Parameters

NameTypeRequiredDescription
orgpathstringRequired

Response200 OK

claims_supportedarray of stringsRequired
id_token_signing_alg_values_supportedarray of stringsRequired
issuerstringRequired
jwks_uristringRequired
response_types_supportedarray of stringsRequired
scopes_supportedarray of stringsRequired
subject_types_supportedarray of stringsRequired
curl "$CIRESK_API/v1/ci/oidc/901294da-f5ca-4c65-ab68-be8716a75989/.well-known/openid-configuration"
GET/v1/ci/oidc/{org}/jwks

Get the OIDC keys

The public keys an organisation's id tokens are signed with.

No credential

Parameters

NameTypeRequiredDescription
orgpathstringRequired

Response200 OK

keysarray of objectsRequired
keys[].algstringRequired
keys[].estringRequired
the exponent, base64url without padding
keys[].kidstringRequired
the RFC 7638 thumbprint
keys[].ktystringRequired
keys[].nstringRequired
the modulus, base64url without padding
keys[].usestringRequired
curl "$CIRESK_API/v1/ci/oidc/901294da-f5ca-4c65-ab68-be8716a75989/jwks"