---
title: "OAuth authorization server metadata"
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["auth", "discovery"]
---

# OAuth authorization server metadata

`GET /.well-known/oauth-authorization-server`

## Request

- Base URL: `https://www.stuntdouble.io`
- URL: `https://www.stuntdouble.io/.well-known/oauth-authorization-server`
- Auth: none declared

The issuer's RFC 8414 metadata, served on this host as well as the issuer's own. This host is not an OAuth issuer: the document is `https://app.stuntdouble.io`'s, and its `issuer` names that origin. It lists the authorization, token and registration endpoints, PKCE support and `scopes_supported`.

## Response `200`

The authorization server metadata.

- object
  - `issuer` string, uri, required
  - `authorization_endpoint` string, uri, required
  - `token_endpoint` string, uri, required
  - `registration_endpoint` string, uri
  - `response_types_supported` string[], required
  - `grant_types_supported` string[]
  - `code_challenge_methods_supported` string[]
  - `scopes_supported` string[]
  - `token_endpoint_auth_methods_supported` string[]

---

[API](https://skmtc.dev/stuntdouble/apis/stunt-double-public-api.md) · [All operations](https://skmtc.dev/stuntdouble/apis/stunt-double-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/stuntdouble/apis/stunt-double-public-api/revisions/f7d32f1d1c42?raw)