GET /.well-known/openid-configuration

First of three sibling discovery documents that deliberately contradict each other. Claims the OIDC issuer is https://catastrophic.io. Compare against the OAuth AS doc and the agent card.

control Compare against the well-formed counterpart: not.catastrophic.io/.well-known/openid-configuration side-by-side

bash

curl -is https://chaos.catastrophic.io/.well-known/openid-configuration | grep -i 'X-Chaos-Claims-Issuer\|issuer'

import json, urllib.request
data = json.loads(urllib.request.urlopen(
    "https://chaos.catastrophic.io/.well-known/openid-configuration").read())
print(data["issuer"])

const data = await (await fetch(
    "https://chaos.catastrophic.io/.well-known/openid-configuration")).json();
console.log(data.issuer);

package main

import (
    "encoding/json"
    "fmt"
    "io"
    "net/http"
)

func main() {
    resp, _ := http.Get("https://chaos.catastrophic.io/.well-known/openid-configuration")
    defer resp.Body.Close()
    raw, _ := io.ReadAll(resp.Body)
    var data map[string]any
    json.Unmarshal(raw, &data)
    fmt.Println(data["issuer"])
}

// Cargo.toml: reqwest    = { version = "0.12", features = ["blocking", "json"] }
//             serde_json = "1"
fn main() -> Result<(), Box> {
    let data: serde_json::Value = reqwest::blocking::get(
        "https://chaos.catastrophic.io/.well-known/openid-configuration")?.json()?;
    println!("{}", data["issuer"]);
    Ok(())
}

// Requires Jackson
import com.fasterxml.jackson.databind.ObjectMapper;
import java.net.URI;
import java.net.http.*;

public class OidcDiscovery {
    public static void main(String[] args) throws Exception {
        var client = HttpClient.newHttpClient();
        var req = HttpRequest.newBuilder(URI.create(
            "https://chaos.catastrophic.io/.well-known/openid-configuration")).build();
        var resp = client.send(req, HttpResponse.BodyHandlers.ofString());
        System.out.println(new ObjectMapper().readTree(resp.body()).path("issuer").asText());
    }
}

using System.Text.Json;
using var client = new HttpClient();
var raw = await client.GetStringAsync("https://chaos.catastrophic.io/.well-known/openid-configuration");
Console.WriteLine(JsonDocument.Parse(raw).RootElement.GetProperty("issuer"));

require "net/http"
require "json"
data = JSON.parse(Net::HTTP.get(URI("https://chaos.catastrophic.io/.well-known/openid-configuration")))
puts data["issuer"]

$r = Invoke-WebRequest 'https://chaos.catastrophic.io/.well-known/openid-configuration'
($r.Content | ConvertFrom-Json).issuer