generated: '2026-07-18'
method: searched
source: https://auth.blackore.ai/.well-known/openid-configuration
# No public OpenAPI is available for Black Ore; this auth profile is captured from
# the live OIDC/OAuth 2.0 discovery documents served by the platform's identity
# tenant (Auth0-hosted) at auth.blackore.ai. Platform sign-in and any customer
# API integration are gated through this tenant.
docs: https://blackore.ai/security
summary:
  types: [oauth2, openIdConnect]
  oauth2_flows: [authorizationCode, implicit, deviceCode]
  pkce: [S256, plain]
schemes:
- name: OpenIDConnect
  type: openIdConnect
  openIdConnectUrl: https://auth.blackore.ai/.well-known/openid-configuration
  issuer: https://auth.blackore.ai/
  sources: [well-known/black-ore-openid-configuration.json]
- name: OAuth2
  type: oauth2
  authorizationUrl: https://auth.blackore.ai/authorize
  tokenUrl: https://auth.blackore.ai/oauth/token
  deviceAuthorizationUrl: https://auth.blackore.ai/oauth/device/code
  revocationUrl: https://auth.blackore.ai/oauth/revoke
  registrationUrl: https://auth.blackore.ai/oidc/register
  jwksUrl: https://auth.blackore.ai/.well-known/jwks.json
  token_endpoint_auth_methods: [client_secret_basic, client_secret_post, private_key_jwt, none]
  scopes_supported: [openid, profile, offline_access, name, given_name, family_name,
    nickname, email, email_verified, picture, created_at, identities, phone, address]
  sources: [well-known/black-ore-oauth-authorization-server.json]