Reject non-POST PAR requests.

GET

/par

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/par

The pushed authorization request endpoint only supports POST. GET returns a method-not-allowed OAuth-style error.

Responses

405

Method not allowed error response.

Media type application/json

object

error

string

error_description

string

message

string

webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object

unknown_credential

boolean

Example

{
  "error": "invalid_request",
  "error_description": "Method not allowed"
}