swagger: '2.0'
info:
  version: 2020-08-01-preview
  title: Microsoft Azure AccessControlClient AccessConnector OpenID Metadata Discovery API
schemes:
- https
tags:
- name: OpenID Metadata Discovery
paths:
  /certs:
    get:
      tags:
      - OpenID Metadata Discovery
      produces:
      - application/jwk+json
      - application/json
      summary: Microsoft Azure Retrieves The Attestation Signing Keys In Use By The Attestation Service
      description: Retrieves metadata signing certificates in use by the attestation service
      operationId: microsoftAzureSigningcertificatesGet
      responses:
        '200':
          description: Success
          schema:
            $ref: ../../../../../common-types/rfcs/rfc7517.json#/definitions/JSONWebKeySet
        default:
          description: Error response describing why the operation failed
          schema:
            $ref: '#/definitions/CloudError'
      x-ms-examples:
        Get Token Signing Certificates:
          $ref: ./examples/Get_Certs.json
  /.well-known/openid-configuration:
    get:
      tags:
      - OpenID Metadata Discovery
      summary: Microsoft Azure Retrieves The Openid Configuration Data For The Azure Attestation Service
      description: Retrieves metadata about the attestation signing keys in use by the attestation service
      operationId: microsoftAzureMetadataconfigurationGet
      responses:
        '200':
          description: Success
          schema:
            $ref: '#/definitions/OpenIDConfigurationResponse'
        default:
          description: Error response describing why the operation failed
          schema:
            $ref: '#/definitions/CloudError'
      x-ms-examples:
        Get OpenID Metadata:
          $ref: ./examples/Get_MetadataConfiguration.json
definitions:
  CloudErrorBody:
    x-ms-external: true
    properties:
      code:
        type: string
        description: An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
      message:
        type: string
        description: A message describing the error, intended to be suitable for displaying in a user interface.
    description: An error response from Attestation.
  CloudError:
    x-ms-external: true
    properties:
      error:
        $ref: '#/definitions/CloudErrorBody'
    description: An error response from Attestation.
  OpenIDConfigurationResponse:
    type: object
    description: The response to the OpenID metadata description document API
    properties:
      response_types_supported:
        description: Types supported in the OpenID metadata API
        type: array
        items:
          type: string
      id_token_signing_alg_values_supported:
        description: List of the supported signing algorithms
        type: array
        items:
          type: string
      revocation_endpoint:
        description: Revocation endpoint
        type: string
      issuer:
        description: Issuer tenant base endpoint
        type: string
      jwks_uri:
        description: The URI to retrieve the signing keys
        type: string
      claims_supported:
        description: Set of claims supported by the OpenID metadata endpoint
        type: array
        items:
          type: string
x-ms-parameterized-host:
  hostTemplate: '{endpoint}'
  useSchemePrefix: false
  parameters:
  - $ref: '#/parameters/Endpoint'