Lua Requires Chilkat v11.0.0+

Azure Fetch OpenID Connect metadata document

See more OIDC Examples

Downloads the OpenID Connect self-discovery document for an Azure OIDC enabled app. Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local http = chilkat.Http.new()

http.accept = "application/json"

-- See the Microsoft Azure OIDC documentation at https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
-- The "tenant" can take one of four values described in the documentation at the link above.

local success = http:set_url_var("tenant", "6d8ddd66-68d1-44b0-af5c-e31b4b7ee5cd")
local resp = chilkat.HttpResponse.new()
success = http:http_no_body("GET", "https://login.microsoftonline.com/{$tenant}/v2.0/.well-known/openid-configuration", resp)
if not success then
    print(http.last_error_text)
    return
end

print("Response Status Code: " .. resp.status_code)

local json = chilkat.JsonObject.new()
json:load(resp.body_str)
json.emit_compact = false
print(json:emit())

if resp.status_code ~= 200 then
    print("Failed.")
    return
end

-- Sample output...
-- (See the parsing code below..)
--
-- Use the this online tool to generate parsing code from sample JSON:
-- Generate Parsing Code from JSON

-- {
--   "token_endpoint": "https://login.microsoftonline.com/6d8ddd66-68d1-44b0-af5c-e31b4b7ee5cd/oauth2/v2.0/token",
--   "token_endpoint_auth_methods_supported": [
--     "client_secret_post",
--     "private_key_jwt",
--     "client_secret_basic"
--   ],
--   "jwks_uri": "https://login.microsoftonline.com/6d8ddd66-68d1-44b0-af5c-e31b4b7ee5cd/discovery/v2.0/keys",
--   "response_modes_supported": [
--     "query",
--     "fragment",
--     "form_post"
--   ],
--   "subject_types_supported": [
--     "pairwise"
--   ],
--   "id_token_signing_alg_values_supported": [
--     "RS256"
--   ],
--   "response_types_supported": [
--     "code",
--     "id_token",
--     "code id_token",
--     "id_token token"
--   ],
--   "scopes_supported": [
--     "openid",
--     "profile",
--     "email",
--     "offline_access"
--   ],
--   "issuer": "https://login.microsoftonline.com/6d8ddd66-68d1-44b0-af5c-e31b4b7ee5cd/v2.0",
--   "request_uri_parameter_supported": false,
--   "userinfo_endpoint": "https://graph.microsoft.com/oidc/userinfo",
--   "authorization_endpoint": "https://login.microsoftonline.com/6d8ddd66-68d1-44b0-af5c-e31b4b7ee5cd/oauth2/v2.0/authorize",
--   "device_authorization_endpoint": "https://login.microsoftonline.com/6d8ddd66-68d1-44b0-af5c-e31b4b7ee5cd/oauth2/v2.0/devicecode",
--   "http_logout_supported": true,
--   "frontchannel_logout_supported": true,
--   "end_session_endpoint": "https://login.microsoftonline.com/6d8ddd66-68d1-44b0-af5c-e31b4b7ee5cd/oauth2/v2.0/logout",
--   "claims_supported": [
--     "sub",
--     "iss",
--     "cloud_instance_name",
--     "cloud_instance_host_name",
--     "cloud_graph_host_name",
--     "msgraph_host",
--     "aud",
--     "exp",
--     "iat",
--     "auth_time",
--     "acr",
--     "nonce",
--     "preferred_username",
--     "name",
--     "tid",
--     "ver",
--     "at_hash",
--     "c_hash",
--     "email"
--   ],
--   "kerberos_endpoint": "https://login.microsoftonline.com/6d8ddd66-68d1-44b0-af5c-e31b4b7ee5cd/kerberos",
--   "tenant_region_scope": "NA",
--   "cloud_instance_name": "microsoftonline.com",
--   "cloud_graph_host_name": "graph.windows.net",
--   "msgraph_host": "graph.microsoft.com",
--   "rbac_url": "https://pas.windows.net"
-- }

local strVal = ""

local token_endpoint = json:string_of("token_endpoint")
local jwks_uri = json:string_of("jwks_uri")
local issuer = json:string_of("issuer")
local request_uri_parameter_supported = json:bool_of("request_uri_parameter_supported")
local userinfo_endpoint = json:string_of("userinfo_endpoint")
local authorization_endpoint = json:string_of("authorization_endpoint")
local device_authorization_endpoint = json:string_of("device_authorization_endpoint")
local http_logout_supported = json:bool_of("http_logout_supported")
local frontchannel_logout_supported = json:bool_of("frontchannel_logout_supported")
local end_session_endpoint = json:string_of("end_session_endpoint")
local kerberos_endpoint = json:string_of("kerberos_endpoint")
local tenant_region_scope = json:string_of("tenant_region_scope")
local cloud_instance_name = json:string_of("cloud_instance_name")
local cloud_graph_host_name = json:string_of("cloud_graph_host_name")
local msgraph_host = json:string_of("msgraph_host")
local rbac_url = json:string_of("rbac_url")
local i = 0
local count_i = json:size_of_array("token_endpoint_auth_methods_supported")
while i < count_i do
    json.i = i
    strVal = json:string_of("token_endpoint_auth_methods_supported[i]")
    i = i + 1
end

i = 0
count_i = json:size_of_array("response_modes_supported")
while i < count_i do
    json.i = i
    strVal = json:string_of("response_modes_supported[i]")
    i = i + 1
end

i = 0
count_i = json:size_of_array("subject_types_supported")
while i < count_i do
    json.i = i
    strVal = json:string_of("subject_types_supported[i]")
    i = i + 1
end

i = 0
count_i = json:size_of_array("id_token_signing_alg_values_supported")
while i < count_i do
    json.i = i
    strVal = json:string_of("id_token_signing_alg_values_supported[i]")
    i = i + 1
end

i = 0
count_i = json:size_of_array("response_types_supported")
while i < count_i do
    json.i = i
    strVal = json:string_of("response_types_supported[i]")
    i = i + 1
end

i = 0
count_i = json:size_of_array("scopes_supported")
while i < count_i do
    json.i = i
    strVal = json:string_of("scopes_supported[i]")
    i = i + 1
end

i = 0
count_i = json:size_of_array("claims_supported")
while i < count_i do
    json.i = i
    strVal = json:string_of("claims_supported[i]")
    i = i + 1
end