PRproof
OAuth 2.0

Get Authorization Server Metadata

Returns the authorization server metadata: the endpoints, grant types, scopes, response types, response modes, PKCE methods and client authentication methods this authorization server supports.

get/.well-known/oauth-authorization-server

Request

  • Base URL
    https://api.proof.com
  • URL
    https://api.proof.com/.well-known/oauth-authorization-server
  • Auth
    none declared

Response

successful

issuerstring

Identifier of the authorization server.

authorization_endpointstring

URL of the authorization endpoint.

token_endpointstring

URL of the token endpoint.

registration_endpointstring

URL of the client registration endpoint. Present when Dynamic Client Registration is available.

revocation_endpointstring

URL of the revocation endpoint.

introspection_endpointstring

URL of the introspection endpoint.

jwks_uristring

URL of the JWK Set holding the keys of the authorization server.

scopes_supportedstring[]

Scopes the token endpoint supports.

response_types_supportedstring[]

Response types the authorization endpoint supports.

response_modes_supportedstring[]

Response modes the authorization endpoint supports.

grant_types_supportedstring[]

Grant types the token endpoint supports.

token_endpoint_auth_methods_supportedstring[]

Client authentication methods the token endpoint supports.

token_endpoint_auth_signing_alg_values_supportedstring[]

JWS signing algorithms the token endpoint accepts for private_key_jwt client assertions.

revocation_endpoint_auth_methods_supportedstring[]

Client authentication methods the revocation endpoint supports.

revocation_endpoint_auth_signing_alg_values_supportedstring[]

JWS signing algorithms the revocation endpoint accepts for private_key_jwt client assertions.

introspection_endpoint_auth_methods_supportedstring[]

Client authentication methods the introspection endpoint supports.

introspection_endpoint_auth_signing_alg_values_supportedstring[]

JWS signing algorithms the introspection endpoint accepts for private_key_jwt client assertions.

code_challenge_methods_supportedstring[]

PKCE code challenge methods the authorization endpoint supports.

client_id_metadata_document_supportedboolean

Whether the authorization server accepts Client ID Metadata Documents, an HTTPS URL used as the client_id.

authorization_response_iss_parameter_supportedboolean

Whether authorization responses carry the iss parameter identifying this authorization server. Compare it to issuer before using the code.

Changes

No recorded changes to this operation across all 1 revision of this API.