---
title: "Authorization server metadata (RFC 8414)"
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["OAuth"]
---

# Authorization server metadata (RFC 8414)

`GET /.well-known/oauth-authorization-server`

## Request

- Base URL: `https://api.educaplay.com`
- URL: `https://api.educaplay.com/.well-known/oauth-authorization-server`
- Auth: none required

Describes the authorization server: the authorization page on the main site, the token and registration endpoints of this API, the `code` response type, the `authorization_code` grant, PKCE `S256`, public clients only (`token_endpoint_auth_methods_supported: ["none"]`) and support for client ID metadata documents, so a client that publishes its metadata at an HTTPS URL can use that URL as `client_id` without registering.

## Response `200`

Metadata document.

- AuthorizationServerMetadata
  - `issuer` string, uri
  - `authorization_endpoint` string, uri: Authorization page on the main site (`/oauth/authorize/`), where the user signs in and grants access.
  - `token_endpoint` string, uri
  - `registration_endpoint` string, uri
  - `response_types_supported` string[]
  - `grant_types_supported` string[]
  - `code_challenge_methods_supported` string[]
  - `token_endpoint_auth_methods_supported` string[]
  - `client_id_metadata_document_supported` boolean
  - `scopes_supported` string[]

## Changes

- **2026-10-19** `e31d97013d0d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/educaplay/apis/educaplay-api/changes/.well-known/oauth-authorization-server/get.md)

---

[API](https://skmtc.dev/educaplay/apis/educaplay-api.md) · [All operations](https://skmtc.dev/educaplay/apis/educaplay-api/llms.txt) · [OpenAPI document](https://skmtc.dev/educaplay/apis/educaplay-api/revisions/e31d97013d0d?raw)