The well-known endpoint (.well-known/openid-configuration) that provides OpenID Connect configuration metadata, including all available endpoints and supported features.
Hugging Face issuer URL
https://huggingface.co
A unique identifier URL that identifies the OAuth/OIDC provider and is used to validate tokens
Hugging Face authorization endpoint
https://huggingface.co/oauth/authorize
The endpoint to redirect users to in order to grant your application access to their account.
Hugging Face token endpoint
https://huggingface.co/oauth/token
The endpoint to exchange the authorization code or refresh token for an access token and a refresh token.
Hugging Face userinfo endpoint
https://huggingface.co/oauth/userinfo
The standardized OAuth endpoint that returns authenticated user profile information, including claims about the current user based on the scope of access token.
Hugging Face JWKS URI
https://huggingface.co/oauth/jwks
The URI that provides public keys for verifying JWT tokens. These keys are used to validate the authenticity of tokens issued by the authorization server.
Hugging Face OAuth & OIDC documentation and resources