Create
Register a resource server (a third-party authorization server) as a permitted cross-app-access audience for an application. The audience must be unique within the application and must not equal your own tenant’s issuer — C1 cannot be both the granting IdP and the resource server in the same flow.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.
Path Parameters
The application this resource server fronts.
Body
XAAResourceServerServiceCreateRequest registers a new resource server.
Description of the resource server.
When true, the resource server is registered but exchange requests are rejected.
Display name for the resource server.
XAAModifyClaimsHook registers a tenant Function invoked just before a grant is signed. The function may deny issuance or narrow the outgoing claims. It always runs blocking and fails closed: any error, timeout, or invalid result denies the grant.
The resource authorization server's issuer identifier. Must not equal your own tenant's issuer. Normalized and immutable after creation.
When true, mint proof-of-possession-bound grants.
Resource identifiers this server governs (RFC 8707).
JWS algorithm for grants minted for this server. UNSPECIFIED uses the tenant default.
XAA_SIGNING_ALGORITHM_UNSPECIFIED, XAA_SIGNING_ALGORITHM_EDDSA, XAA_SIGNING_ALGORITHM_RS256, XAA_SIGNING_ALGORITHM_ES256 Response
XAAResourceServerServiceCreateResponse returns the registered resource server.
XAAResourceServerServiceCreateResponse returns the registered resource server.
XAAResourceServer is a third-party authorization server registered as a permitted cross-app-access audience for one application.