Introspect the current identity
Returns the identity resolved from the current credential — the actor (subject) plus the credential type used (JWT token or API key). API keys authenticate with their full raw key; the subject carries the key's capability grants.
/auth/introspectReturns the identity resolved from the current credential — the actor (subject) plus the credential type used (JWT token or API key). API keys authenticate with their full raw key; the subject carries the key's capability grants.
JWT issued by IdentityX, signed with Ed25519
In: header
Response Body
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/auth/introspect"{
"code": 200,
"message": "string",
"error": {
"code": "BAD_REQUEST",
"message": "string",
"fields": [
{
"field": "string",
"message": "string"
}
],
"meta": {},
"debug": {
"raw_error": "string",
"stack_trace": "string"
}
},
"pagination": {
"page": 1,
"limit": 1,
"total": 0,
"has_next": true,
"has_prev": true,
"next_page": 0,
"prev_page": 0
},
"timestamp": "2019-08-24T14:15:22Z",
"module": "string",
"data": {
"subject": {
"id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
"project_id": "405d8375-3514-403b-8c43-83ae74cfe0e9",
"email": "user@example.com",
"type": "human",
"verified_at": "2019-08-24T14:15:22Z",
"capabilities": {},
"metadata": {}
},
"cred": {
"id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
"type": "token"
}
}
}{
"code": 0,
"message": "string",
"error": {
"code": "BAD_REQUEST",
"message": "string",
"fields": [
{
"field": "string",
"message": "string"
}
],
"meta": {},
"debug": {
"raw_error": "string",
"stack_trace": "string"
}
},
"timestamp": "2019-08-24T14:15:22Z",
"module": "IdentityX"
}{
"code": 0,
"message": "string",
"error": {
"code": "BAD_REQUEST",
"message": "string",
"fields": [
{
"field": "string",
"message": "string"
}
],
"meta": {},
"debug": {
"raw_error": "string",
"stack_trace": "string"
}
},
"timestamp": "2019-08-24T14:15:22Z",
"module": "IdentityX"
}{
"code": 0,
"message": "string",
"error": {
"code": "BAD_REQUEST",
"message": "string",
"fields": [
{
"field": "string",
"message": "string"
}
],
"meta": {},
"debug": {
"raw_error": "string",
"stack_trace": "string"
}
},
"timestamp": "2019-08-24T14:15:22Z",
"module": "IdentityX"
}Discover enabled social login providers GET
Public discovery of the OAuth providers a scope currently accepts logins with. With `project_id`, returns the project's enabled providers; without it, IdentityX's own platform providers (env-configured). The frontend login modal renders one button per returned provider.
Get a JWKS GET
Provides the JSON Web Key Set (JWKS) for verifying JWTs issued by the authentication service. Omit `project_id` for the platform keyset, or pass a project id for that project's keyset. Response is a raw JWKS document (RFC 7517), NOT the fun envelope, and is cached for 2 hours by the server.