---
title: "Discovery"
method: GET
path: "/oauth/.well-known/oauth-authorization-server"
tags: ["oauth"]
---

# Discovery

`GET /oauth/.well-known/oauth-authorization-server`

## Request

- Base URL: `https://api.ranch.bot`
- URL: `https://api.ranch.bot/oauth/.well-known/oauth-authorization-server`
- Auth: none required

Current oauth HTTP operation. No resource-scope middleware on this operation. Access is resolved for the authenticated user or by the endpoint-specific OAuth checks.

## Response `200`

Success

- object
  - `issuer` string, required
  - `authorization_endpoint` string, required
  - `token_endpoint` string, required
  - `revocation_endpoint` string, required
  - `userinfo_endpoint` string, required
  - `jwks_uri` string, required
  - `response_types_supported` string[], required
  - `grant_types_supported` string[], required
  - `code_challenge_methods_supported` string[], required
  - `scopes_supported` string[], required
  - `token_endpoint_auth_methods_supported` string[], required

## Other responses

- `400`: Request validation failed.
- `401`: Missing/invalid authentication or insufficient farm role.
- `403`: Missing required scope or credential type is disallowed.
- `404`: Resource or active farm membership not found.
- `500`: Unexpected server failure.

---

[API](https://skmtc.dev/ranch/apis/ranch-bot-http-api.md) · [All operations](https://skmtc.dev/ranch/apis/ranch-bot-http-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ranch/apis/ranch-bot-http-api/revisions/24109d33fa02?raw)