Documentation

API Reference

Endpoints implemented by Radiant Auth for OAuth 2.1 / OpenID Connect clients and first-party services.

Note

Protocol endpoints live under the issuer base https://auth.rdnt.live/api/auth (Better Auth basePath). The site origin is https://auth.rdnt.live. Internal routes require INTERNAL_API_SECRET and are for first-party apps only.

OAuth / OIDC

GET/api/auth/oauth2/authorize

Authorize

Start the Authorization Code + PKCE flow.

View docs

POST/api/auth/oauth2/token

Token

Exchange an authorization code or refresh token.

View docs

GET/api/auth/oauth2/userinfo

UserInfo

Return claims for the access token subject.

View docs

POST/api/auth/oauth2/revoke

Revoke

Revoke an access or refresh token.

View docs

POST/api/auth/oauth2/introspect

Introspect

Check whether a token is active (RFC 7662).

View docs

GET/api/auth/oauth2/end-session

End Session

RP-initiated OpenID Connect logout.

View docs

GET/.well-known/openid-configuration

Discovery

OIDC discovery document (canonical under /api/auth).

View docs

GET/api/auth/jwks

JWKS

JSON Web Key Set for verifying JWTs.

View docs

GET/api/health

Health

Liveness check for the auth Worker.

View docs

Internal (first-party)

POST/api/internal/discord-token

Discord Token

Fetch a linked Discord OAuth token for guild fulfillment.

View docs

POST/api/internal/user-access

User Access

Confirm bans and revoked grants still block the user.

View docs

Swift (iOS)

Authorize