Return OAuth Authorization Server metadata.

GET

/.well-known/oauth-authorization-server

Shell / cURL

curl --request GET \
  --url https://auth.example.com/.well-known/oauth-authorization-server

Responses

200

Successful JSON response.

application/json

object

issuer

required

string format: uri

authorization_endpoint

required

string format: uri

token_endpoint

required

string format: uri

userinfo_endpoint

string format: uri

jwks_uri

required

string format: uri

registration_endpoint

string format: uri

introspection_endpoint

string format: uri

revocation_endpoint

string format: uri

pushed_authorization_request_endpoint

string format: uri

require_pushed_authorization_requests

boolean

response_types_supported

required

Array<string>

grant_types_supported

required

Array<string>

scopes_supported

Array<string>

claims_supported

Array<string>

code_challenge_methods_supported

Array<string>

key

additional properties

Example

{
  "issuer": "https://auth.example.com",
  "authorization_endpoint": "https://auth.example.com/authorize",
  "token_endpoint": "https://auth.example.com/token",
  "jwks_uri": "https://auth.example.com/.well-known/jwks.json",
  "response_types_supported": [
    "code",
    "id_token",
    "code id_token"
  ],
  "grant_types_supported": [
    "authorization_code",
    "refresh_token"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ]
}