---
title: "Get OAuth 2.0 configuration"
method: GET
path: "/oauth2-configurations"
tags: ["OAuth 2.0"]
---

# Get OAuth 2.0 configuration

`GET /oauth2-configurations`

Retrieve the current OAuth 2.0 configuration for the instance

## Response `200`

Successfully retrieved OAuth 2.0 configuration

- OAuth2Configuration
  - `resource_server_id` string — Unique identifier for the resource server
  - `issuer` string, uri — OAuth 2.0 issuer URL (must be HTTPS)
  - `preferred_username_claims` string[] — JWT claim names to use for username
  - `additional_scopes_key` string[] — JWT claim keys containing additional scopes
  - `scope_prefix` string — Prefix to add to scopes
  - `scope_aliases` object — Map scope aliases to actual scopes (RabbitMQ 4.1.0+)
  - `verify_aud` boolean — Whether to verify audience claim in tokens
  - `oauth_client_id` string — Client ID for management interface
  - `oauth_scopes` string[] — Scopes required for management interface
  - `audience` string — OAuth 2.0 audience claim (required for Auth0 with RabbitMQ 4.1+). Typically matches resource_server_id
  - `oauth_disable_basic_auth` boolean — Disable static username/password management interface access, allowing only OAuth 2.0 authentication
  - `id` string, uuid — Configuration ID
  - `created_at` string, date-time — Configuration creation timestamp
  - `updated_at` string, date-time — Configuration last update timestamp

## Other responses

- `404` — No OAuth 2.0 configuration found

---

[API](https://skmtc.dev/cloudamqp/apis/cloudamqp-instance-api.md) · [All operations](https://skmtc.dev/cloudamqp/apis/cloudamqp-instance-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudamqp/cloudamqp-instance-api/revisions/d04a3670170c/schema)
