---
title: "Get Authorization Server Metadata"
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["OAuth 2.0"]
---

# Get Authorization Server Metadata

`GET /.well-known/oauth-authorization-server`

## Request

- Base URL: `https://api.proof.com`
- URL: `https://api.proof.com/.well-known/oauth-authorization-server`
- Auth: none declared

Returns the [authorization server metadata](https://datatracker.ietf.org/doc/html/rfc8414#section-2): the endpoints, grant types, scopes, response types, response modes, PKCE methods and client authentication methods this authorization server supports.

## Response `200`

successful

- AuthorizationServerMetadata
  - `issuer` string: Identifier of the authorization server.
  - `authorization_endpoint` string: URL of the [authorization endpoint](https://datatracker.ietf.org/doc/html/rfc6749#section-3.1).
  - `token_endpoint` string: URL of the [token endpoint](https://datatracker.ietf.org/doc/html/rfc6749#section-3.2).
  - `registration_endpoint` string: URL of the [client registration endpoint](https://datatracker.ietf.org/doc/html/rfc7591#section-3). Present when Dynamic Client Registration is available.
  - `revocation_endpoint` string: URL of the [revocation endpoint](https://datatracker.ietf.org/doc/html/rfc7009#section-2).
  - `introspection_endpoint` string: URL of the [introspection endpoint](https://datatracker.ietf.org/doc/html/rfc7662#section-2).
  - `jwks_uri` string: URL of the [JWK Set](https://datatracker.ietf.org/doc/html/rfc7517#section-5) holding the keys of the authorization server.
  - `scopes_supported` string[]: Scopes the token endpoint supports.
  - `response_types_supported` string[]: Response types the authorization endpoint supports.
  - `response_modes_supported` string[]: [Response modes](https://openid.net/specs/oauth-v2-multiple-response-types-1_0.html#ResponseModes) the authorization endpoint supports.
  - `grant_types_supported` string[]: Grant types the token endpoint supports.
  - `token_endpoint_auth_methods_supported` string[]: Client authentication methods the token endpoint supports.
  - `token_endpoint_auth_signing_alg_values_supported` string[]: JWS signing algorithms the token endpoint accepts for [`private_key_jwt`](https://datatracker.ietf.org/doc/html/rfc7523#section-2.2) client assertions.
  - `revocation_endpoint_auth_methods_supported` string[]: Client authentication methods the revocation endpoint supports.
  - `revocation_endpoint_auth_signing_alg_values_supported` string[]: JWS signing algorithms the revocation endpoint accepts for `private_key_jwt` client assertions.
  - `introspection_endpoint_auth_methods_supported` string[]: Client authentication methods the introspection endpoint supports.
  - `introspection_endpoint_auth_signing_alg_values_supported` string[]: JWS signing algorithms the introspection endpoint accepts for `private_key_jwt` client assertions.
  - `code_challenge_methods_supported` string[]: [PKCE](https://datatracker.ietf.org/doc/html/rfc7636#section-4.2) code challenge methods the authorization endpoint supports.
  - `client_id_metadata_document_supported` boolean: Whether the authorization server accepts [Client ID Metadata Documents](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-client-id-metadata-document), an HTTPS URL used as the `client_id`.
  - `authorization_response_iss_parameter_supported` boolean: Whether authorization responses carry the [`iss` parameter](https://datatracker.ietf.org/doc/html/rfc9207#section-2) identifying this authorization server. Compare it to `issuer` before using the `code`.

---

[API](https://skmtc.dev/proof/apis/oauth-2-0-api-specification.md) - [All operations](https://skmtc.dev/proof/apis/oauth-2-0-api-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/proof/apis/oauth-2-0-api-specification/revisions/7e769f9c96ed?raw)