API Endpoints Reference

https://identities.authsafe.in

curl "https://identities.authsafe.in/auth/authorize?client_id=your_client_id&redirect_uri=https://yourapp.com/callback&response_type=code&scope=openid%20profile%20email&state=random_state_string&code_challenge=CODE_CHALLENGE&code_challenge_method=S256"

https://yourapp.com/callback?code=AUTHORIZATION_CODE&state=random_state_string

Content-Type: application/x-www-form-urlencoded

curl -X POST https://identities.authsafe.in/auth/token \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=authorization_code" \
  -d "code=AUTHORIZATION_CODE" \
  -d "redirect_uri=https://yourapp.com/callback" \
  -d "client_id=your_client_id" \
  -d "client_secret=your_client_secret" \
  -d "code_verifier=CODE_VERIFIER"

{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "refresh_token": "refresh_token_value",
  "id_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "scope": "openid profile email"
}

curl -X POST https://identities.authsafe.in/auth/token \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=refresh_token" \
  -d "refresh_token=REFRESH_TOKEN" \
  -d "client_id=your_client_id" \
  -d "client_secret=your_client_secret"

{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "openid profile email"
}

curl -X POST https://identities.authsafe.in/auth/token \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=client_credentials" \
  -d "client_id=your_client_id" \
  -d "client_secret=your_client_secret" \
  -d "scope=api:read"

{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "api:read"
}

Authorization: Bearer ACCESS_TOKEN

curl https://identities.authsafe.in/auth/user-info \
  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."

{
  "sub": "user_unique_identifier",
  "name": "John Doe",
  "email": "john.doe@example.com",
  "email_verified": true,
  "picture": "https://example.com/profile.jpg",
  "updated_at": 1234567890
}

Content-Type: application/x-www-form-urlencoded

curl -X POST https://identities.authsafe.in/auth/introspect \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "token=TOKEN_TO_INTROSPECT" \
  -d "client_id=your_client_id" \
  -d "client_secret=your_client_secret"

{
  "active": true,
  "scope": "openid profile email",
  "client_id": "your_client_id",
  "token_type": "Bearer",
  "exp": 1234567890,
  "iat": 1234564290,
  "sub": "user_unique_identifier"
}

{
  "active": false
}

Content-Type: application/x-www-form-urlencoded

curl -X POST https://identities.authsafe.in/auth/revoke \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "token=TOKEN_TO_REVOKE" \
  -d "client_id=your_client_id" \
  -d "client_secret=your_client_secret"

{
  "message": "Token revoked successfully"
}

curl "https://identities.authsafe.in/auth/logout?id_token_hint=ID_TOKEN&post_logout_redirect_uri=https://yourapp.com/logged-out&state=random_state"

curl "https://identities.authsafe.in/auth/branding?client_id=your_client_id"

{
  "logo_url": "https://example.com/logo.png",
  "brand_color": "#0066CC",
  "application_name": "Your Application",
  "privacy_policy_url": "https://example.com/privacy",
  "terms_of_service_url": "https://example.com/terms"
}

curl https://identities.authsafe.in/.well-known/openid-configuration

{
  "issuer": "https://identities.authsafe.in",
  "authorization_endpoint": "https://identities.authsafe.in/auth/authorize",
  "token_endpoint": "https://identities.authsafe.in/auth/token",
  "userinfo_endpoint": "https://identities.authsafe.in/auth/user-info",
  "jwks_uri": "https://identities.authsafe.in/.well-known/jwks.json",
  "end_session_endpoint": "https://identities.authsafe.in/auth/logout",
  "introspection_endpoint": "https://identities.authsafe.in/auth/introspect",
  "revocation_endpoint": "https://identities.authsafe.in/auth/revoke",
  "response_types_supported": ["code"],
  "grant_types_supported": ["authorization_code", "refresh_token", "client_credentials"],
  "subject_types_supported": ["public"],
  "id_token_signing_alg_values_supported": ["RS256"],
  "scopes_supported": ["openid", "profile", "email", "offline_access"],
  "token_endpoint_auth_methods_supported": ["client_secret_post"],
  "code_challenge_methods_supported": ["S256"],
  "claims_supported": ["sub", "name", "email", "email_verified", "picture", "updated_at"]
}

curl https://identities.authsafe.in/.well-known/jwks.json

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "key_identifier",
      "alg": "RS256",
      "n": "modulus_value",
      "e": "AQAB"
    }
  ]
}

{
  "error": "invalid_request",
  "error_description": "Missing required parameter: code_verifier"
}

X-RateLimit-Limit: 100
X-RateLimit-Remaining: 95
X-RateLimit-Reset: 1234567890