Quickstart

Request an access & refresh token

POST /token
content-type: application/x-www-form-urlencoded
grant_type=password&username=<user>&password=<pass>

Fetch the authenticated user

GET /userinfo
Authorization: Bearer <access_token>

Verify tokens with the public signing key

GET /jwks

Trusted backend calls the internal identity API

GET /internal/identity/users/<id>
X-Service-Token: <AUTHX_SERVICE_TOKEN>

Documentation