Issuer endpoints on 0trust.cloud. Portal wrappers on 0trust.codes (same origin as this site when proxied to platform).
| Endpoint | URL |
|---|---|
| Issuer | https://0trust.cloud |
| Discovery | https://0trust.cloud/.well-known/openid-configuration |
| Authorize | https://0trust.cloud/auth/authorize |
| Token | https://0trust.cloud/auth/token |
| JWKS | https://0trust.cloud/auth/keys |
| UserInfo | https://0trust.cloud/api/v1/idp/userinfo |
| Revoke | https://0trust.cloud/auth/revoke |
| Login (passkey) | https://0trust.cloud/auth?return_to=https://0trust.codes/developers |
| Method | Path | Notes |
|---|---|---|
| GET | /api/v1/developer/meta | Public issuer + SDK metadata |
| POST | /api/v1/developer/signup | Wraps company signup |
| GET | /api/v1/developer/signup/check | Subdomain availability |
| GET | /api/v1/developer/apps | List my OIDC clients (auth) |
| POST | /api/v1/developer/apps | Create client (auth) |
| DELETE | /api/v1/developer/apps/{id} | Delete client (auth) |
openid profile email offline_access
Authorization code + PKCE S256. Validate id_token with JWKS (RS256), check iss, aud, exp, nonce.