<!doctype html>
<head>
<script type="module" src="https://unpkg.com/rapidoc/dist/rapidoc-min.js"></script>
</head>
<body>
<rapi-doc spec-url = "https://mrin9.github.io/RapiDoc/specs/oauth.yaml" >
</rapi-doc>
</body>
<!doctype html>
<head>
<script type="module" src="https://unpkg.com/rapidoc/dist/rapidoc-min.js"></script>
</head>
<body>
<oauth-receiver> </oauth-receiver>
</body>
openapi: 3.0.0
info:
title: Identity 4 Server
description: Test case for oAuth flows
version: "1.0"
servers:
- url: https://demo.duendesoftware.com
paths:
/api/test:
get:
summary: Test API
security:
- short-lived-oauth:
- long-lived-oauth:
responses:
'200':
description: Successful operation
/connect/userinfo:
get:
summary: Get User Info
security:
- short-lived-oauth:
- openid
- email
- profile
- long-lived-oauth:
- openid
- email
- profile
responses:
'200':
description: Successful operation
components:
securitySchemes:
short-lived-oauth:
type: oauth2
description: Provides OAuth token valid for short duration ~75 seconds
# pre filling client-id, secret and scopes for (ALL flows)
x-client-id: interactive.confidential.short
x-client-secret: secret
x-default-scopes:
openid
flows:
authorizationCode:
authorizationUrl: https://demo.duendesoftware.com/connect/authorize
tokenUrl: https://demo.identityserver.io/connect/token
scopes:
openid: OpenID
email: Email
profile: Profile
long-lived-oauth:
type: oauth2
description: Provides an OAuth token thats valid for long durations
flows:
authorizationCode:
authorizationUrl: https://demo.duendesoftware.com/connect/authorize
tokenUrl: https://demo.identityserver.io/connect/token
scopes:
openid: OpenID
email: Email
profile: Profile
# pre filling client-id, secret and scopes for (SPECIFIC flow)
x-client-id: interactive.confidential
x-client-secret: secret
x-default-scopes:
openid
# when x-pkce-only=true, it will not allow to provide or send client_secret through the UI
x-pkce-only: true