info:
  name: Get OIDC well-known configuration
  type: http
  seq: 1

http:
  method: GET
  url: "{{shibbolethServerUri}}/.well-known/openid-configuration"
  auth: inherit

settings:
  encodeUrl: true
  timeout: 0
  followRedirects: true
  maxRedirects: 5
  forwardAuthorizationHeader: true

examples:
  - name: Endpoints
    request:
      url: https://shibidp.unipr.it/.well-known/openid-configuration
      method: GET
    response:
      status: 200
      statusText: OK
      headers:
        - name: date
          value: Wed, 19 Aug 2026 07:20:27 GMT
        - name: server
          value: Jetty(11.0.19)
        - name: strict-transport-security
          value: max-age=63072000; includeSubDomains, max-age=63072000 ; includeSubDomains ; preload
        - name: x-content-type-options
          value: nosniff
        - name: x-frame-options
          value: SAMEORIGIN, DENY
        - name: expires
          value: ""
        - name: cache-control
          value: no-store
        - name: content-type
          value: application/json;charset=utf-8
        - name: content-security-policy
          value: frame-ancestors 'none'; base-uri 'none'; script-src 'self' https://shibidp.unipr.it 'unsafe-inline';
        - name: set-cookie
          value: __Host-JSESSIONID=node01shvwd2kdnmjg1lxw0l50a24k060260.node0; Path=/; Secure; HttpOnly
        - name: keep-alive
          value: timeout=2, max=100
        - name: connection
          value: Keep-Alive
        - name: transfer-encoding
          value: chunked
      body:
        type: json
        data: |-
          {
            "authorization_endpoint": "https://shibidp.unipr.it/idp/profile/oidc/authorize",
            "token_endpoint": "https://shibidp.unipr.it/idp/profile/oidc/token",
            "registration_endpoint": "https://shibidp.unipr.it/idp/profile/oidc/register",
            "introspection_endpoint": "https://shibidp.unipr.it/idp/profile/oauth2/introspection",
            "revocation_endpoint": "https://shibidp.unipr.it/idp/profile/oauth2/revocation",
            "issuer": "https://shibidp.unipr.it",
            "jwks_uri": "https://shibidp.unipr.it/idp/profile/oidc/keyset",
            "scopes_supported": [
              "openid",
              "profile",
              "email",
              "spid",
              "offline_access"
            ],
            "response_types_supported": [
              "id_token",
              "code",
              "code id_token",
              "code id_token token"
            ],
            "response_modes_supported": [
              "query",
              "fragment",
              "form_post"
            ],
            "grant_types_supported": [
              "authorization_code",
              "implicit",
              "refresh_token"
            ],
            "token_endpoint_auth_methods_supported": [
              "client_secret_basic",
              "client_secret_post",
              "client_secret_jwt",
              "private_key_jwt"
            ],
            "request_object_signing_alg_values_supported": [
              "none",
              "RS256",
              "RS384",
              "RS512",
              "HS256",
              "HS384",
              "HS512",
              "ES256",
              "ES384",
              "ES512"
            ],
            "request_parameter_supported": true,
            "request_uri_parameter_supported": true,
            "require_request_uri_registration": true,
            "subject_types_supported": [
              "public",
              "pairwise"
            ],
            "userinfo_endpoint": "https://shibidp.unipr.it/idp/profile/oidc/userinfo",
            "id_token_signing_alg_values_supported": [
              "RS256",
              "RS384",
              "RS512",
              "HS256",
              "HS384",
              "HS512",
              "ES256",
              "ES384",
              "ES512",
              "PS256",
              "PS384",
              "PS512"
            ],
            "id_token_encryption_alg_values_supported": [
              "RSA1_5",
              "RSA-OAEP",
              "RSA-OAEP-256",
              "RSA-OAEP-384",
              "RSA-OAEP-512",
              "A128KW",
              "A192KW",
              "A256KW",
              "A128GCMKW",
              "A192GCMKW",
              "A256GCMKW",
              "ECDH-ES",
              "ECDH-ES+A128KW",
              "ECDH-ES+A192KW",
              "ECDH-ES+A256KW"
            ],
            "id_token_encryption_enc_values_supported": [
              "A128CBC-HS256",
              "A192CBC-HS384",
              "A256CBC-HS512",
              "A128GCM",
              "A192GCM",
              "A256GCM"
            ],
            "userinfo_signing_alg_values_supported": [
              "RS256",
              "RS384",
              "RS512",
              "HS256",
              "HS384",
              "HS512",
              "ES256",
              "ES384",
              "ES512",
              "PS256",
              "PS384",
              "PS512"
            ],
            "userinfo_encryption_alg_values_supported": [
              "RSA1_5",
              "RSA-OAEP",
              "RSA-OAEP-256",
              "RSA-OAEP-384",
              "RSA-OAEP-512",
              "A128KW",
              "A192KW",
              "A256KW",
              "A128GCMKW",
              "A192GCMKW",
              "A256GCMKW",
              "ECDH-ES",
              "ECDH-ES+A128KW",
              "ECDH-ES+A192KW",
              "ECDH-ES+A256KW"
            ],
            "userinfo_encryption_enc_values_supported": [
              "A128CBC-HS256",
              "A192CBC-HS384",
              "A256CBC-HS512",
              "A128GCM",
              "A192GCM",
              "A256GCM"
            ],
            "display_values_supported": [
              "page"
            ],
            "claims_supported": [
              "aud",
              "iss",
              "sub",
              "iat",
              "exp",
              "acr",
              "auth_time",
              "email",
              "name",
              "family_name",
              "given_name",
              "updated_at",
              "codicefiscale",
              "unipr_spid_email",
              "spidName",
              "spidFamilyName",
              "spidCode",
              "spidFiscalNumber",
              "externalIDPLoA",
              "externalIDPType",
              "eduPersonScopedAffiliation"
            ],
            "claims_parameter_supported": true
          }