Add an OIDC trusted-identity issuer (discovery + test-fetch before save)

POST 
/api/v1/admin/identity/issuers

Takes an issuer URL as a discovery locator, fetches its /.well-known/openid-configuration, derives and test-fetches the JWKS (SSRF-guarded), and stores the canonical discovery issuer + derived jwks_uri. Fails 422 if discovery/test-fetch fails (no row written); 409 on a duplicate (issuer, audience). Requires manage_settings.

Request

Responses

201

Default Response

400

Default Response

401

Default Response

403

Default Response

404

Default Response

409

Default Response

422

Default Response

429

Default Response

500

Default Response

503

Default Response