BUILD

OpenID Connect

OIDC adds identity claims to Lucion's OAuth authorization server.

GET/oauth/userinfo

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/oauth/userinfo'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

OAuth bearer

No request body documented.

Request IDs: X-Request-IDFull OpenAPI operation

GET/.well-known/openid-configuration

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/.well-known/openid-configuration'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

public

No request body documented.

Request IDs: X-Request-IDFull OpenAPI operation

GET/.well-known/jwks.json

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/.well-known/jwks.json'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

public

No request body documented.

Request IDs: X-Request-IDFull OpenAPI operation

Claim source	Validation
Discovery	Use issuer and endpoint metadata from the canonical issuer.
ID token	Verify signature with JWKS; validate issuer, audience, expiry, and nonce when used.
UserInfo	Call with a valid OAuth access token and enforce returned scope.
JWKS	Use the published public keys; never expect private signing material.