Create OIDC Trust

Required role: admin or higher.

Request Body — REQUIRED
audience string Optional audience claim pattern. * matches any sequence of characters. If omitted, the audience claim is not checked.
description string Optional human-readable description.
issuer string — REQUIRED Issuer URL exactly as it appears in the iss claim. JWKS are discovered at <issuer>/.well-known/openid-configuration.
name string — REQUIRED Trust relationship name. Unique within the tenant.
role string Possible values: [read, write, admin] A role assignable to a tenant member: read, write, or admin. owner is a platform-wide role, not a tenant membership, so it is not a valid value here.
subject string — REQUIRED Subject claim pattern. * matches any sequence of characters.

Responses
201 Trust relationship created Schema — OPTIONAL id uuid Trust relationship identifier. name string
400 A required field is empty Schema — OPTIONAL details Detailed error metadata. The contents of this field is determined by error_code. error_code string Error code is a string that specifies this error type. message string Human-readable error message.
403 Caller's role is below the required role, or the requested role exceeds the caller's own Schema — OPTIONAL details Detailed error metadata. The contents of this field is determined by error_code. error_code string Error code is a string that specifies this error type. message string Human-readable error message.
409 Name already in use Schema — OPTIONAL details Detailed error metadata. The contents of this field is determined by error_code. error_code string Error code is a string that specifies this error type. message string Human-readable error message.
500 Schema — OPTIONAL details Detailed error metadata. The contents of this field is determined by error_code. error_code string Error code is a string that specifies this error type. message string Human-readable error message.