OAuth 2.1 · OpenID Connect · PKCE

The identity layer for
Blue Ecosystem

Blue Auth is the centralized authentication and authorization service that issues a unified Blue-Passport JWT trusted by every service in the ecosystem — Member Portal, Super Dashboard, Blue House, and beyond.

Sign In Discovery Doc

OAuth 2.1 + OIDC

Full Authorization Code flow with mandatory PKCE. Compliant discovery document and JWKS endpoint for token verification.

RBAC Claims

Every token carries aggregated roles and permissions — a single Blue-Passport recognized across all services.

Edge-Native Security

Runs on Cloudflare Workers with bot detection, rate limiting, and RS256/EdDSA signing. Zero cold starts.

Key Endpoints

Click GET endpoints to inspect · POST endpoints require a client and token

GET /.well-known/openid-configuration GET /jwks.json GET /api/auth/oauth2/userinfo GET /api/auth/get-session
POST /oauth2/authorize → token use /test-client.html
POST /api/auth/oauth2/revoke Bearer token