# auth.md

This document describes how AI agents can discover and access public resources on Jackpot Jill.

## Service

- Name: Jackpot Jill
- Resource: https://uncomplicated.life/
- Scopes: `public.read`
- Contact: admin@uncomplicated.life

## Discovery

1. Read API catalog: https://uncomplicated.life/.well-known/api-catalog
2. Read protected resource metadata: https://uncomplicated.life/.well-known/oauth-protected-resource
3. Read authorization server metadata: https://uncomplicated.life/.well-known/oauth-authorization-server
4. Read OpenID configuration: https://uncomplicated.life/.well-known/openid-configuration
5. Read the `agent_auth` block in the authorization server metadata.

## OAuth

- Issuer: https://uncomplicated.life/
- Authorization endpoint: https://uncomplicated.life/wp-login.php
- Token endpoint: https://uncomplicated.life/wp-json/agent-discovery/v1/oauth/token
- JWKS directory: https://uncomplicated.life/.well-known/http-message-signatures-directory
- Supported grants: `authorization_code`
- Supported scopes: `public.read`

## Registration

Agents may use the anonymous registration flow for public read access.
No user account, email confirmation, or bearer token is required for public pages.

### Anonymous flow

1. Read this document and the `agent_auth` metadata block.
2. Use `register_uri` to confirm the supported anonymous flow.
3. Use `claim_uri` to claim anonymous public-read access when needed.
4. Access public resources without credentials.

### Supported identity types

- `anonymous`

### Supported credential types

- `bearer` (optional, not required for public resources)

### Registration endpoints

- `register_uri`: https://uncomplicated.life/auth.md
- `claim_uri`: https://uncomplicated.life/auth.md

## Web Bot Auth

Public signing keys for HTTP message signatures are published at https://uncomplicated.life/.well-known/http-message-signatures-directory.
Well-behaved bots can use these keys to verify signed requests when required.

## Public resources

- Homepage: https://uncomplicated.life/
- Sitemap: https://uncomplicated.life/sitemap.xml
- API catalog: https://uncomplicated.life/.well-known/api-catalog
- OpenAPI: https://uncomplicated.life/openapi.json
- Agent card: https://uncomplicated.life/.well-known/agent-card.json
- Agent skills: https://uncomplicated.life/.well-known/agent-skills/index.json