Warwick Web Sign-on OAuth Services

aid: university-of-warwick:oauth
name: Warwick Web Sign-on OAuth Services
description: OAuth 1.0a delegated access to Warwick web services — Sitebuilder (separate read and edit
  scopes), Warwick Search, Files.Warwick, Warwick Blogs, Warwick Forums, Exam Timetabling, Printer Credits
  and Web Sign-on itself. Signed with RSA-SHA1 or HMAC-SHA1. Uses a Warwick-specific `scope` parameter
  that is not part of the OAuth standard and cannot travel in the Authorization header. Applications must
  be registered with the ITS Web Team before a token will be issued. Note this is OAuth 1.0a, not OAuth
  2.0, and there is no OIDC discovery document — /.well-known/openid-configuration returns 404.
x-operator: institution
x-operator-evidence: Token endpoints are on websignon.warwick.ac.uk, Warwick's own host; the scope URNs
  name Warwick services exclusively.
humanURL: https://warwick.ac.uk/services/its/servicessupport/web/sign-on/help/oauth/apis/
x-baseurl-note: No baseURL is emitted. https://websignon.warwick.ac.uk/oauth returns HTTP 404 — there
  is no resource at the OAuth path root, only the three named token endpoints. Those are recorded in authentication/university-of-warwick-authentication.yml
  rather than emitted as a pointer that would grade dead.
tags:
- Authentication
- Identity
- Education
tags_raw:
- Authentication
- OAuth
- Identity
- Education
properties:
- type: Documentation
  url: https://warwick.ac.uk/services/its/servicessupport/web/sign-on/help/oauth/apis/
- type: Authentication
  url: authentication/university-of-warwick-authentication.yml
- type: Scopes
  url: scopes/university-of-warwick-oauth-scopes.yml