---
title: "Get authorization server metadata, if the integrated authorization server is enabled. Conforms to OAuth2"
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["Integrated Authorization Server"]
---

# Get authorization server metadata, if the integrated authorization server is enabled. Conforms to OAuth2

`GET /.well-known/oauth-authorization-server`

## Request

- Base URL: `https://agent.findynet.demo.sphereon.com/oid4vci`
- URL: `https://agent.findynet.demo.sphereon.com/oid4vci/.well-known/oauth-authorization-server`
- Auth: none declared
- TypeScript: <https://skmtc.dev/sphereon-opensource/apis/sphereon-oid4vci-api/docs/.well-known/oauth-authorization-server/get.ts> (a function with typed inputs; its response is checked against the schema)

## Response `200`

Successful response

- AuthorizationServerMetadata: OAuth 2.0 Authorization Server metadata with OID4VCI v1.0.15 extensions
  - `issuer` string, required: Authorization server's identifier URL
  - `authorization_endpoint` string: URL of the authorization endpoint
  - `token_endpoint` string: URL of the token endpoint
  - `jwks_uri` string: URL of the JSON Web Key Set document
  - `registration_endpoint` string: URL of the dynamic client registration endpoint
  - `scopes_supported` string[]: List of OAuth 2.0 scope values supported
  - `response_types_supported` string[], required: List of OAuth 2.0 response_type values supported
  - `response_modes_supported` string[]: List of OAuth 2.0 response_mode values supported
  - `grant_types_supported` string[]: List of OAuth 2.0 grant type values supported
  - `token_endpoint_auth_methods_supported` string[]: List of client authentication methods supported by token endpoint
  - `token_endpoint_auth_signing_alg_values_supported` string[]: List of JWS signing algorithms supported for client authentication
  - `service_documentation` string: URL of human-readable service documentation
  - `ui_locales_supported` string[]: List of UI locales supported
  - `op_policy_uri` string: URL of the authorization server's policy document
  - `op_tos_uri` string: URL of the authorization server's terms of service
  - `revocation_endpoint` string: URL of the token revocation endpoint
  - `revocation_endpoint_auth_methods_supported` string[]: List of client authentication methods supported by revocation endpoint
  - `revocation_endpoint_auth_signing_alg_values_supported` string[]: List of JWS signing algorithms for revocation endpoint authentication
  - `introspection_endpoint` string: URL of the token introspection endpoint
  - `introspection_endpoint_auth_methods_supported` string[]: List of client authentication methods supported by introspection endpoint
  - `introspection_endpoint_auth_signing_alg_values_supported` string[]: List of JWS signing algorithms for introspection endpoint authentication
  - `code_challenge_methods_supported` string[]: List of PKCE code challenge methods supported
  - `pushed_authorization_request_endpoint` string: URL of the pushed authorization request endpoint
  - `require_pushed_authorization_requests` boolean: Whether PAR is required for authorization requests
  - `dpop_signing_alg_values_supported` string[]: List of JWS algorithms supported for DPoP proof JWTs
  - `userinfo_endpoint` string: URL of the UserInfo endpoint
  - `check_session_iframe` string: URL of an OP iframe for session management
  - `end_session_endpoint` string: URL of the end session endpoint
  - `acr_values_supported` string[]: List of Authentication Context Class References supported
  - `subject_types_supported` string[]: List of Subject Identifier types supported
  - `id_token_signing_alg_values_supported` string[]: List of JWS algorithms supported for ID Token signing
  - `id_token_encryption_alg_values_supported` string[]: List of JWE algorithms supported for ID Token encryption
  - `id_token_encryption_enc_values_supported` string[]: List of JWE encryption methods supported for ID Token
  - `request_object_signing_alg_values_supported` string[]: List of JWS algorithms supported for request objects
  - `request_object_encryption_alg_values_supported` string[]: List of JWE algorithms supported for request object encryption
  - `request_object_encryption_enc_values_supported` string[]: List of JWE encryption methods supported for request objects
  - `display_values_supported` string[]: List of display parameter values supported
  - `claim_types_supported` string[]: List of claim types supported
  - `claims_supported` string[]: List of claim names supported
  - `claims_parameter_supported` boolean: Whether the claims parameter is supported
  - `request_parameter_supported` boolean: Whether the request parameter is supported
  - `request_uri_parameter_supported` boolean: Whether the request_uri parameter is supported
  - `require_request_uri_registration` boolean: Whether request_uri values must be pre-registered
  - `frontchannel_logout_supported` boolean: Whether front-channel logout is supported
  - `frontchannel_logout_session_supported` boolean: Whether front-channel logout can include session information
  - `backchannel_logout_supported` boolean: Whether back-channel logout is supported
  - `backchannel_logout_session_supported` boolean: Whether back-channel logout can include session information
  - `pre-authorized_grant_anonymous_access_supported` boolean: OPTIONAL. Boolean indicating whether the Credential Issuer accepts a Token Request with a Pre-Authorized Code but without a client_id. The default is false.
  - `authorization_challenge_endpoint` string: URL of the authorization challenge endpoint (first-party apps)
  - `credential_endpoint` string: URL of the credential endpoint (if AS also acts as credential issuer)
  - `deferred_credential_endpoint` string: URL of the deferred credential endpoint
  - `nonce_endpoint` string: URL of the nonce endpoint (OID4VCI v1.0.15)

## Changes

- **2025-10-24** `bc177bfc5928`: 52 info
  - added the optional property `acr_values_supported` to the response with the `200` status
  - added the optional property `authorization_challenge_endpoint` to the response with the `200` status
  - added the optional property `authorization_endpoint` to the response with the `200` status
  - added the optional property `backchannel_logout_session_supported` to the response with the `200` status
  - …48 more

[Operation history](https://skmtc.dev/sphereon-opensource/apis/sphereon-oid4vci-api/changes/.well-known/oauth-authorization-server/get.md)

---

[API](https://skmtc.dev/sphereon-opensource/apis/sphereon-oid4vci-api.md) - [All operations](https://skmtc.dev/sphereon-opensource/apis/sphereon-oid4vci-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sphereon-opensource/apis/sphereon-oid4vci-api/revisions/bc177bfc5928?raw)