Reference
OIDC discovery document
Says who this issuer is and where its public keys live.
GET
/.well-known/openid-configurationSays who this issuer is and where its public keys live. Entra, Google and a customer's own Vault fetch it to verify the workload tokens penv mints, so it is public and holds nothing secret.
Response Body
application/json
application/json
curl -X GET "https://example.com/.well-known/openid-configuration"{ "issuer": "http://example.com", "jwks_uri": "http://example.com", "response_types_supported": [ "string" ], "subject_types_supported": [ "string" ], "id_token_signing_alg_values_supported": [ "string" ], "claims_supported": [ "string" ]}