Docs/Account/API/Public Endpoints

Public Endpoints

These endpoints require no authentication. Use them to fetch tenant branding for custom login pages, retrieve password policy for client-side validation, and access OIDC discovery and JWKS for token verification.

Base URL: https://id.vyntech.com.au — No authentication required. These endpoints are designed to be called from public frontends and OIDC client libraries.

Get Tenant Branding

Returns branding configuration for a tenant by slug. Use this to render custom-branded login pages with the tenant's logo, colors, and company name.

GET/public/branding/:slugPublic

Get a tenant's branding configuration (no auth required).

curl https://id.vyntech.com.au/public/branding/acme-corp

Get Password Policy

Returns the password policy for a tenant. Use this to show password requirements on registration and change-password forms before the user submits.

GET/public/password-policy/:slugPublic

Get a tenant's password policy (no auth required).

curl https://id.vyntech.com.au/public/password-policy/acme-corp

OIDC Discovery

OpenID Connect Discovery document. Returns all supported endpoints, scopes, algorithms, and grant types. OIDC client libraries use this to auto-configure themselves.

GET/.well-known/openid-configurationPublic

OpenID Connect Discovery document.

curl https://id.vyntech.com.au/.well-known/openid-configuration

JWKS (JSON Web Key Set)

Returns the public key(s) used to sign access tokens and ID tokens. Use these keys to verify JWT signatures in your backend. Cache this response and refresh periodically (keys may rotate).

GET/.well-known/jwks.jsonPublic

JSON Web Key Set for token signature verification.

curl https://id.vyntech.com.au/.well-known/jwks.json

Key rotation: Keys may be rotated periodically. During rotation, both old and new keys are served for 24 hours. Always match the kid from the JWT header to the correct key in the set. Most JWT libraries handle this automatically when configured with the JWKS URI.

What's Next

Authentication Flows →

Visual diagrams of login, MFA, and token verification flows.

OAuth 2.1 / OIDC Integration →

Full guide for integrating via OAuth 2.1 authorization code flow.

Settings API →

Configure tenant branding, password policies, and security settings.

Authentication API →