AOL · OpenAPI Overlay 1.0.0

AOL OpenID Connect API — API Evangelist enhancements

5 actions 5 updates servers extends openapi/aol-openid-connect-api-openapi.yml
Authorship not recorded No authorship marker is recorded for this file. It is not presented as the provider's.
View Overlay File View on GitHub Overlay Specification

What the actions change

serversx-openid-configurationx-issuerbirthdateauth_timex-probedx-key-fieldsx-id-token-signing-algs

Targets 5

$
$.info
$.components.schemas.UserInfo.properties
$.paths['/openid/v1/certs'].get
$.paths['/openid/v1/userinfo'].get

OpenAPI Overlay

Raw ↑ 
overlay: 1.0.0
info:
  title: AOL OpenID Connect API — API Evangelist enhancements
  version: 1.0.0
extends: openapi/aol-openid-connect-api-openapi.yml
x-generated: '2026-09-02'
x-method: probed
x-source: https://api.login.aol.com/.well-known/openid-configuration
x-note: >-
  Adds the AOL-owned identity host and the claims AOL advertises in
  claims_supported that the base specification's UserInfo schema omits. Read from
  AOL's own discovery document and a live 200 on the JWKS endpoint, 2026-09-02.
actions:
- target: $
  description: Add the AOL-owned identity host as the primary server.
  update:
    servers:
    - url: https://api.login.aol.com
      description: >-
        AOL identity / OpenID Connect server. Issuer per
        https://api.login.aol.com/.well-known/openid-configuration.
    - url: https://api.login.yahoo.com
      description: >-
        Yahoo Inc. deployment of the same identity platform. Retained from the
        base specification.
- target: $.info
  update:
    x-openid-configuration: https://api.login.aol.com/.well-known/openid-configuration
    x-issuer: https://api.login.aol.com
- target: $.components.schemas.UserInfo.properties
  description: >-
    Add the two standard claims present in AOL's claims_supported but missing
    from the base schema.
  update:
    birthdate:
      type: string
      description: End-user birthday, advertised in claims_supported.
    auth_time:
      type: integer
      description: >-
        Time of the end-user authentication event, advertised in
        claims_supported. Use with acr to enforce a freshness requirement.
- target: $.paths['/openid/v1/certs'].get
  description: Record the observed live key shape and the signing algorithms in use.
  update:
    x-probed:
      url: https://api.login.aol.com/openid/v1/certs
      status: 200
      fetched: '2026-09-02'
    x-key-fields:
    - kty
    - alg
    - use
    - kid
    - n
    - e
    x-id-token-signing-algs:
    - ES256
    - RS256
- target: $.paths['/openid/v1/userinfo'].get
  description: Record the scope that gates this operation.
  update:
    x-required-scope: openid
    x-error-envelope: 'RFC 6749 {"error","error_description"}'