Endpoints & OIDC

Universal Endpoints

These three endpoints are used on both regular OAuth2 and OIDC

Here are the information you need:

Authorization Endpoint: https://hub.spookysrv.com/oauth2/authorize/ Token Endpoint: https://hub.spookysrv.com/index.php?route=/api/v2/oauth2/token UserInfo Endpoint: https://hub.spookysrv.com/index.php?route=/api/v2/oauth2/user

OpenID Connect (OIDC) Specific Endpoints

Spooky Services supports OpenID Connect (OIDC) for authentication.

OIDC config: https://auth.spookysrv.com/oidc/.well-known/openid-configuration JWKS URI: https://auth.spookysrv.com/oidc/.well-known/jwks.json

Spooky Services ONLY signs with a ES256 key for signature

You MUST verify the JWT Authenticity

Learn more at: Verifying JWT Authenticity