host.oauth.issuer_set
Register (or update) an OAuth issuer for this tenant: bearer JWTs with iss equal to issuer, a matching aud, verified against jwks_url, authenticate as this tenant. Up to 3 issuers per tenant; an issuer already registered by another tenant is refused issuer_already_registered.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| issuer | Yes | The JWT `iss` claim value to match, e.g. https://issuer.example.com. | |
| audience | Yes | The JWT `aud` claim value to require. | |
| jwks_url | Yes | URL this host fetches the issuer's JWKS from. | |
| tenant_key | No | The key `signup` returned. Required only when this connection carries no Authorization: Bearer header -- when both are present, the header wins. |