Everly Health Identity (OAuth 2.0 / OpenID Connect)

aid: everly-health:identity
name: Everly Health Identity (OAuth 2.0 / OpenID Connect)
description: The OAuth 2.0 authorization server and OpenID Connect provider that fronts the Everlywell
  member account. It is not a documented developer product — Everly Health publishes no API reference
  for it — but the authorization server advertises itself anonymously via RFC 8414 / OpenID Connect Discovery
  at https://secure.everlywell.com/.well-known/oauth-authorization-server and /.well-known/openid-configuration,
  and serves a live JWKS. The discovery document declares the authorize, token, revoke, introspect and
  userinfo endpoints, the authorization_code / refresh_token / password grants, PKCE (plain and S256),
  and the openid and public scopes. Everything recorded here was read from those anonymously published
  documents.
humanURL: https://secure.everlywell.com/.well-known/openid-configuration
baseURL: https://secure.everlywell.com
tags:
- Identity
- OAuth
- OpenID Connect
- Authentication
properties:
- type: OpenIDConnect
  url: well-known/everly-health-openid-configuration.json
- type: Authentication
  url: authentication/everly-health-authentication.yml
- type: OAuthScopes
  url: scopes/everly-health-scopes.yml