Skip to main content
GET
Get your application's audiences and allowed origins

Authorizations

X-API-Key
string
header
required

Response

The two lists and their warnings.

Where credentials can be presented and where baselayer.js may run.

audiences
string[]
required

The audiences a key-binding JWT's aud must be one of, sorted ascending.

allowed_origins
string[]
required

The origins a browser check accepts a page from, sorted ascending.

warnings
DomainWarning (v1) · object[]
required

Computed from the two lists on every response and never stored: origin_without_audience for each origin whose host no audience names, bare or as https://<host>.