Sign in
oauth

Serve the OAuth 2.0 Authorization Server Metadata document.

get/.well-known/oauth-authorization-server

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /.well-known/oauth-authorization-server
  • Auth: HTTP bearer

Response

Authorization server metadata

authorization_endpointstring required

URL of the authorization (consent) endpoint.

code_challenge_methods_supportedstring[] required

PKCE challenge methods supported by this server.

grant_types_supportedstring[] required

OAuth 2.0 grant types supported. Always ["authorization_code"].

issuerstring required

Issuer identifier — the deployment's base URL.

response_types_supportedstring[] required

OAuth 2.0 response types supported. Always ["code"].

scopes_supportedstring[] required

API-key scopes that may appear in scopes on the authorize request.

service_documentationstring nullable

Whether the server provides a metadata document (always true here — included for clients that probe the field).

token_endpointstring required

URL of the token (code-exchange) endpoint.

token_endpoint_auth_methods_supportedstring[] required

Token endpoint client-authentication methods. Always ["none"] — PKCE is the authentication mechanism.

Changes

No recorded changes to this operation across all 1 revision of this API.