---
title: "Returns the OAuth 2.1 authorization server metadata (RFC 8414)."
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["oauth"]
---

# Returns the OAuth 2.1 authorization server metadata (RFC 8414).

`GET /.well-known/oauth-authorization-server`

## Request

- Base URL: `https://api.pricklymails.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.pricklymails.com/.well-known/oauth-authorization-server`
- Auth: none declared

## Response `200`

Authorization server metadata.

- AuthorizationServerMetadataResponse: `GET /.well-known/oauth-authorization-server` response body (RFC 8414 subset).
  - `authorization_endpoint` string, required: The authorization endpoint URL.
  - `authorization_response_iss_parameter_supported` boolean, required: `true`: every authorization response (success and `access_denied`) carries `iss` (RFC 9207), letting a client that talks to more than one authorization server verify which one a given callback actually came from.
  - `code_challenge_methods_supported` string[], required: Supported PKCE code challenge methods (RFC 7636).
  - `grant_types_supported` string[], required: Supported OAuth `grant_type` values.
  - `issuer` string, required: The authorization server's issuer identifier: its own public base URL.
  - `registration_endpoint` string, required: The dynamic client registration endpoint URL (RFC 7591).
  - `response_types_supported` string[], required: Supported OAuth `response_type` values.
  - `scopes_supported` string[], required: Scopes this server may grant to a client.
  - `token_endpoint` string, required: The token endpoint URL.
  - `token_endpoint_auth_methods_supported` string[], required: Supported token endpoint authentication methods.

---

[API](https://skmtc.dev/pricklymails/apis/pricklymails-api.md) · [All operations](https://skmtc.dev/pricklymails/apis/pricklymails-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pricklymails/apis/pricklymails-api/revisions/b4225a92d8fb?raw)