Unified Identity & Single Sign-On (SSO) for OneXCC Network
Next-generation enterprise-grade Identity Provider (IdP). Multi-layered security seamlessly bridging personal developer identities and B2B organizational workspaces.
{
"issuer": "https://iam.xcc.one",
"authorization_endpoint": "https://iam.xcc.one/oauth2/authorize",
"token_endpoint": "https://iam.xcc.one/api/auth/oauth2/token",
"userinfo_endpoint": "https://iam.xcc.one/api/auth/oauth2/userinfo",
"jwks_uri": "https://iam.xcc.one/.well-known/jwks.json",
"response_types_supported": ["code"],
"subject_types_supported": ["public"],
"id_token_signing_alg_values_supported": ["RS256"],
"code_challenge_methods_supported": ["S256"],
"scopes_supported": ["openid", "profile", "email", "offline_access"]
}Security Standards & Hardened Infrastructure
Every authentication and authorization transaction is protected by Zero Trust principles, adhering to rigorous modern cryptographic standards.
OpenID Connect & OAuth 2.1
Full OIDC Core 1.0 compliance, standard Discovery Endpoint, and automatic RSA 2048-bit key rotation via JWKS Endpoint.
RFC 8707 Resource Indicators & Audience Binding
Strict RFC 8707 compliance encoding target resource URIs into auth codes and binding access token JWT audience (aud) specifically to MCP hosts and satellite APIs, preventing cross-service token misuse.
PKCE S256 Code Challenge
Mandatory SHA-256 Proof Key for Code Exchange in all authorization code flows, eliminating authorization code interception on client apps.
Argon2id Password Hashing
State-of-the-art password hashing with high memory cost parameters, neutralizing GPU/ASIC hardware brute-force attacks.
Zero-Secret Container Runtime & Cloudflare Turnstile Protection
Isolated Docker container runtime with zero plaintext secrets, AES-256-GCM encrypted configuration files decrypted only in memory. Kết hợp công nghệ phát hiện bot thông minh Cloudflare Turnstile loại bỏ thử thách phiền phức cho người dùng.
Dual-Track Identity: Personal & Enterprise
Clear segregation of duties between independent developer profiles and enterprise B2B workspaces.
Personal Profile (Developer ID)
Built for developers, creators, and independent users
Enterprise Workspaces (B2B Multi-Tenancy)
Engineered for corporations, institutions, and teams