OAuth

Get OAuth authorization server metadata

Changed on

Public OAuth metadata endpoint. Advertises /v3 OAuth API endpoints, the browser authorization endpoint, dynamic client registration, Client ID Metadata Documents, PKCE, RFC 9207 issuer-bound authorization responses, and supported global machine scopes.

get/v3/oauth/.well-known/oauth-authorization-server

Request

  • Base URL
    https://api.scalev.com
  • URL
    https://api.scalev.com/v3/oauth/.well-known/oauth-authorization-server
  • Auth
    none required

Response

OAuth authorization server metadata

issuerstring uri required
authorization_response_iss_parameter_supportedtrue required

RFC 9207 support. Both successful and denied browser authorization callbacks include an iss query parameter exactly matching issuer, including when the authorization endpoint uses a different origin.

authorization_endpointstring uri required
token_endpointstring uri required
registration_endpointstring uri required
introspection_endpointstring uri
revocation_endpointstring uri
response_types_supportedstring[] required
grant_types_supportedstring[] required
token_endpoint_auth_methods_supportedstring[] required
code_challenge_methods_supportedstring[] required
client_id_metadata_document_supportedboolean required
scopes_supportedstring[] required

Example response

{
  "issuer": "https://api.scalev.com/v3/oauth",
  "authorization_response_iss_parameter_supported": true,
  "authorization_endpoint": "https://app.scalev.com/oauth/authorize",
  "token_endpoint": "https://api.scalev.com/v3/oauth/token",
  "registration_endpoint": "https://api.scalev.com/v3/oauth/register",
  "introspection_endpoint": "https://api.scalev.com/v3/oauth/introspect",
  "revocation_endpoint": "https://api.scalev.com/v3/oauth/revoke",
  "response_types_supported": [
    "code"
  ],
  "grant_types_supported": [
    "authorization_code",
    "refresh_token"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "client_id_metadata_document_supported": true
}

Changes

    • info

      added the required property to the response with the status