RFC 8414 authorization server metadata.

GET

/.well-known/oauth-authorization-server

const url = 'https://example.com/api/auth/.well-known/oauth-authorization-server';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://example.com/api/auth/.well-known/oauth-authorization-server

Responses

200

The metadata.

application/json

object

issuer

required

string format: uri

authorization_endpoint

required

string format: uri

token_endpoint

required

string format: uri

revocation_endpoint

required

string format: uri

jwks_uri

required

string format: uri

scopes_supported

Array<string>

Allowed values: user:read user:write clients:read clients:write

response_types_supported

required

Array<string>

response_modes_supported

Array<string>

grant_types_supported

required

Array<string>

token_endpoint_auth_methods_supported

Array<string>

revocation_endpoint_auth_methods_supported

Array<string>

code_challenge_methods_supported

required

Array<string>

authorization_response_iss_parameter_supported

boolean

Example

{
  "scopes_supported": [
    "user:read"
  ]
}