OAuth 2.0 Authorization Server Metadata (RFC 8414)

Docs version v1 (main)Nauthera is pre-1.0, in a design-partner program

GET/.well-known/oauth-authorization-server

Returns the OAuth 2.0 authorization-server metadata (RFC 8414). Shares the metadata schema with the OpenID discovery document; OIDC-only fields may be present. Cacheable (Cache-Control: public, max-age=300).

GET/.well-known/oauth-authorization-server

curl 'https://auth.example.com/.well-known/oauth-authorization-server'

Response

200 OK

{
  "issuer": "https://auth.example.com",
  "authorization_endpoint": "https://auth.example.com/authorize",
  "token_endpoint": "https://auth.example.com/token",
  "userinfo_endpoint": "https://auth.example.com/userinfo",
  "jwks_uri": "https://auth.example.com/.well-known/jwks.json",
  "registration_endpoint": "https://auth.example.com/register",
  "introspection_endpoint": "https://auth.example.com/introspect",
  "revocation_endpoint": "https://auth.example.com/revoke",
  "device_authorization_endpoint": "https://auth.example.com/device_authorization",
  "pushed_authorization_request_endpoint": "https://auth.example.com/par",
  "end_session_endpoint": "https://auth.example.com/end_session",
  "check_session_iframe": "https://auth.example.com/check_session_iframe",
  "response_types_supported": [
    "code"
  ],
  "subject_types_supported": [
    "public"
  ],
  "id_token_signing_alg_values_supported": [
    "ES256"
  ],
  "claims_parameter_supported": true,
  "request_parameter_supported": false,
  "request_uri_parameter_supported": true,
  "require_request_uri_registration": true,
  "require_pushed_authorization_requests": false,
  "authorization_response_iss_parameter_supported": true,
  "tls_client_certificate_bound_access_tokens": false,
  "backchannel_logout_supported": false,
  "backchannel_logout_session_supported": false,
  "frontchannel_logout_supported": false,
  "frontchannel_logout_session_supported": false
}

Authorization

None. This endpoint does not take API credentials.

Responses

200 OKapplication/jsonAuthorization server metadata.
Authorization server metadata.
Body
OAuth 2.0 Authorization Server Metadata (RFC 8414) unified with OpenID Provider Metadata (OIDC Discovery 1.0). Serves both discovery documents.
- issuerstring · urirequired
  The issuer identifier (an https URL, no query/fragment/trailing slash).
  Example"https://auth.example.com"
- authorization_endpointstring · urirequired
  Example"https://auth.example.com/authorize"
- token_endpointstring · urirequired
  Example"https://auth.example.com/token"
- jwks_uristring · urirequired
  Example"https://auth.example.com/.well-known/jwks.json"
- response_types_supportedarray of stringsrequired
  Example["code"]
- subject_types_supportedarray of stringsrequired
  Example["public"]
- id_token_signing_alg_values_supportedarray of stringsrequired
  Example["ES256"]
- userinfo_endpointstring · uri
  Example"https://auth.example.com/userinfo"
- registration_endpointstring · uri
  Example"https://auth.example.com/register"
- introspection_endpointstring · uri
  Example"https://auth.example.com/introspect"
- revocation_endpointstring · uri
  Example"https://auth.example.com/revoke"
- device_authorization_endpointstring · uri
  Example"https://auth.example.com/device_authorization"
- pushed_authorization_request_endpointstring · uri
  Example"https://auth.example.com/par"
- end_session_endpointstring · uri
  Example"https://auth.example.com/end_session"
- check_session_iframestring · uri
  Example"https://auth.example.com/check_session_iframe"
- scopes_supportedarray of strings
  A JSON array of strings.
- response_modes_supportedarray of strings
  A JSON array of strings.
- grant_types_supportedarray of strings
  A JSON array of strings.
- userinfo_signing_alg_values_supportedarray of strings
  A JSON array of strings.
- request_object_signing_alg_values_supportedarray of strings
  A JSON array of strings.
- token_endpoint_auth_methods_supportedarray of strings
  A JSON array of strings.
- token_endpoint_auth_signing_alg_values_supportedarray of strings
  A JSON array of strings.
- revocation_endpoint_auth_methods_supportedarray of strings
  A JSON array of strings.
- revocation_endpoint_auth_signing_alg_values_supportedarray of strings
  A JSON array of strings.
- introspection_endpoint_auth_methods_supportedarray of strings
  A JSON array of strings.
- introspection_endpoint_auth_signing_alg_values_supportedarray of strings
  A JSON array of strings.
- code_challenge_methods_supportedarray of strings
  A JSON array of strings.
- dpop_signing_alg_values_supportedarray of strings
  A JSON array of strings.
- authorization_details_types_supportedarray of strings
  A JSON array of strings.
- claims_supportedarray of strings
  A JSON array of strings.
- ui_locales_supportedarray of strings
  A JSON array of strings.
- acr_values_supportedarray of strings
  A JSON array of strings.
- claims_parameter_supportedboolean
  Exampletrue
- request_parameter_supportedboolean
  Examplefalse
- request_uri_parameter_supportedboolean
  Exampletrue
- require_request_uri_registrationboolean
  Exampletrue
- require_pushed_authorization_requestsboolean
  Examplefalse
- authorization_response_iss_parameter_supportedboolean
  Exampletrue
- tls_client_certificate_bound_access_tokensboolean
  Examplefalse
- backchannel_logout_supportedboolean
  Examplefalse
- backchannel_logout_session_supportedboolean
  Examplefalse
- frontchannel_logout_supportedboolean
  Examplefalse
- frontchannel_logout_session_supportedboolean
  Examplefalse
- service_documentationstring · uri
- op_policy_uristring · uri
- op_tos_uristring · uri

PreviousOpenID Connect discovery document NextJSON Web Key Set

Authorization

Responses

Body