# Janssen Auth Server API

**Canonical:** https://apis.io/apis/gluu/jans-auth-server-api/  
**Provider:** Gluu — https://apis.io/providers/gluu/  
**Base URL:** https://{host}/jans-auth  
**Documentation:** https://docs.jans.io/stable/janssen-server/auth-server/

Janssen Auth Server API is one of 10 APIs that [Gluu](https://apis.io/providers/gluu/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Authentication, Authorization, CIBA, OpenID Connect, and UMA. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

The Janssen Authorization Server REST API — a certified OpenID Provider implementing OAuth 2.0, OpenID Connect Core, dynamic client registration, CIBA backchannel authentication, UMA 2.0 resource registration, Pushed Authorization Requests, Software Statement Assertions, token status lists and an AuthZEN configuration endpoint. 46 operations across 33 paths.

## Operations (46)

| Method | Path | Summary |
|---|---|---|
| GET | `/.well-known/authzen-configuration` | Gets Access Evaluation configuration data. |
| POST | `/restv1/evaluation` | Access Evaluation AuthZEN |
| POST | `/restv1/authorize-challenge` | The Authorization Challenge Endpoint performs Authentication of the End-User by native application to obtain an authorization code. |
| GET | `/restv1/authorize` | The Authorization Endpoint performs Authentication of the End-User. |
| POST | `/restv1/authorize` | The Authorization Endpoint performs Authentication of the End-User. |
| POST | `/restv1/par` | The Pushed Authorization Endpoint performs Authentication Request registration |
| POST | `/restv1/bc-authorize` | Performs backchannel authorization of the end-user. |
| POST | `/restv1/bc-deviceRegistration` | Performs backchannel device registration. |
| GET | `/restv1/clientinfo` | To get Claims details about the registered client. |
| POST | `/restv1/clientinfo` | To get Claims details about the registered client. |
| POST | `/.well-known/openid-configuration` | Gets Janssen Server configuration data that contains non-standard OpenID Connect discovery metadata. |
| GET | `/restv1/introspection` | The Introspection OAuth 2 Endpoint. |
| POST | `/restv1/introspection` | The Introspection OAuth 2 Endpoint. |
| GET | `/restv1/jwks` | A JSON Web Key (JWK) used by server. JWK is a JSON data structure that represents a set of public keys as a JSON object [RFC4627]. |
| GET | `/restv1/jwks/archived` | An archived JSON Web Key (JWK) used by server. JWK is a JSON data structure that represents a set of public keys as a JSON object [RFC4627]. |
| POST | `/restv1/register` | Registers new client dynamically. |
| PUT | `/restv1/register` | Updates Client Metadata for a registered client. |
| GET | `/restv1/register` | Get client information for a previously registered client. |
| DELETE | `/restv1/register` | Deletes the client info for a previously registered client. |
| POST | `/restv1/revoke` | Revoke an Access Token or a Refresh Token, the RP (Client). |
| GET | `/restv1/session_status` | Determine current session status. |
| GET | `/restv1/status_list_aggregation` | The Status List Aggregatiojn Endpoint. |
| GET | `/restv1/status_list` | The Status List Endpoint. |
| POST | `/restv1/global-token-revocation` | Global Token Revocation |
| GET | `/restv1/end_session` | End current session. |
| POST | `/restv1/token` | To obtain an Access Token, an ID Token, and optionally a Refresh Token, the RP (Client). |
| GET | `/restv1/uma/gather_claims` | UMA Claims Gathering Endpoint. |
| POST | `/restv1/uma/gather_claims` | UMA Claims Gathering Endpoint |
| GET | `/restv1/uma2-configuration` | Gets UMA configuration data. |
| POST | `/restv1/host/rsrc_pr` | Registers permission. |
| POST | `/restv1/host/rsrc/resource_set` | Adds a new resource description. |
| PUT | `/restv1/host/rsrc/resource_set/{rsid}:` | Updates a previously registered resource. |
| GET | `/restv1/host/rsrc/resource_set/{rsid}:` | Lists all previously registered resource. |
| DELETE | `/restv1/host/rsrc/resource_set/{rsid}:` | Deletes a previously registered resource. |
| GET | `/restv1/host/rsrc/resource_set/{rsid}` | Reads a previously registered resource. |
| GET | `/restv1/rpt/status` | The Introspection OAuth 2 Endpoint for RPT. |
| POST | `/restv1/rpt/status` | The Introspection OAuth 2 Endpoint for RPT. |
| GET | `/restv1/uma/scopes{id}` | Provides UMA Scope description by scope id. |
| GET | `/restv1/userinfo` | Returns Claims about the authenticated End-User. |
| POST | `/restv1/userinfo` | Returns Claims about the authenticated End-User. |
| GET | `/restv1/internal/stat` | Get Internal Statistic |
| POST | `/restv1/ssa` | Create SSA. |
| GET | `/restv1/ssa` | Get list of SSAs |
| DELETE | `/restv1/ssa` | Revoke SSA |
| POST | `/restv1/ssa/validation` | Validate SSA |
| GET | `/restv1/ssa/jwt` | Get JWT of SSA based on JTI. |

## Machine-readable artifacts (3)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/gluu/refs/heads/main/openapi/gluu-jans-auth-server-openapi.yml
- **Documentation** — https://docs.jans.io/stable/janssen-server/auth-server/openid-features/
- **Overlay** — https://raw.githubusercontent.com/api-evangelist/gluu/refs/heads/main/overlays/gluu-jans-auth-server-overlay.yaml

## Other Gluu APIs (9)

- [Gluu Flex](https://apis.io/apis/gluu/gluu-flex/)
- [Gluu Solo](https://apis.io/apis/gluu/gluu-solo/)
- [Janssen Project](https://apis.io/apis/gluu/janssen-project/)
- [Janssen Config API](https://apis.io/apis/gluu/jans-config-api/)
- [Janssen SCIM API](https://apis.io/apis/gluu/jans-scim-api/)
- [Janssen FIDO2 API](https://apis.io/apis/gluu/jans-fido2-api/)
- [Janssen Lock API](https://apis.io/apis/gluu/jans-lock-api/)
- [Cedarling](https://apis.io/apis/gluu/cedarling/)
- [Agama Lab](https://apis.io/apis/gluu/agama-lab/)

## Tags

Authentication, Authorization, CIBA, OpenID Connect, UMA

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/gluu/jans-auth-server-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/gluu/.