generated: '2026-07-23'
method: searched
source: https://gateway-portal.hub-verify.innovation.interac.ca/.well-known/*
host: https://gateway-portal.hub-verify.innovation.interac.ca
notes: The gateway root requires authentication for every path except the OIDC discovery document and
  the JWKS endpoint, which are served anonymously (HTTP 200). Per the docs, preprod and production issuer
  URLs are restricted and provided during partner onboarding; the developer-portal issuer discovery above
  is the single public machine-readable contract for the Hub Verification Service.
hosts:
- host: https://gateway-portal.hub-verify.innovation.interac.ca
  documents:
  - path: /.well-known/openid-configuration
    status: 200
    file: interac-openid-configuration.json
  - path: /.well-known/jwks.json
    status: 200
    file: interac-jwks.json
  - path: /.well-known/oauth-authorization-server
    status: 401
  - path: /.well-known/security.txt
    status: 401
  - path: /.well-known/api-catalog
    status: 401
x-shape-fix:
  converted: '2026-08-20'
  from: documents
  note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served
    .well-known surface recorded in any other shape scores as absent.