Developers

Zaleo is a standard OpenID Connect provider. Use the authorization code flow with PKCE.

Endpoints

OpenID Connect 1.0 · OAuth 2.1

Discoveryhttps://auth.zaleo.dev/.well-known/openid-configuration

Issuerhttps://auth.zaleo.dev

Authorizationhttps://auth.zaleo.dev/api/auth/oauth2/authorize

Tokenhttps://auth.zaleo.dev/api/auth/oauth2/token

UserInfohttps://auth.zaleo.dev/api/auth/oauth2/userinfo

JWKShttps://auth.zaleo.dev/api/auth/jwks

Introspectionhttps://auth.zaleo.dev/api/auth/oauth2/introspect

End sessionhttps://auth.zaleo.dev/api/auth/oauth2/end-session

Scopes

ID tokens: RS256

openidprofileemailoffline_access

Authorization code + PKCE

GET https://auth.zaleo.dev/api/auth/oauth2/authorize
  ?response_type=code
  &client_id=<CLIENT_ID>
  &redirect_uri=https://kaddu.zaleo.dev/api/auth/oauth2/callback/zaleo
  &scope=openid%20profile%20email
  &state=<random>
  &code_challenge=<S256(verifier)>
  &code_challenge_method=S256

Registering an app

Clients are registered by an administrator. Ask for a client ID and secret with your redirect URIs.