OAuth

OAuth 2.1 authorization-server metadata (RFC 8414)

Published when OAUTH_ENABLED=true. Answers 404 while the flag is off. No Tre bearer. Advertises authorize, token and revoke endpoints, S256 PKCE, and none / private_key_jwt client auth.

get/.well-known/oauth-authorization-server

Request

Base URL: https://tre-app.com
URL: https://tre-app.com/.well-known/oauth-authorization-server
Auth: none required

Response

Success

issuerstring uri required

authorization_endpointstring uri required

token_endpointstring uri required

revocation_endpointstring uri required

response_types_supportedstring[] required

grant_types_supportedstring[] required

code_challenge_methods_supportedstring[] required

token_endpoint_auth_methods_supportedstring[] required

token_endpoint_auth_signing_alg_values_supportedstring[] required

JWS algorithms accepted for private_key_jwt client assertions (ES256, RS256, PS256, EdDSA).

revocation_endpoint_auth_methods_supportedstring[] required

revocation_endpoint_auth_signing_alg_values_supportedstring[] required

scopes_supportedstring[] required

client_id_metadata_document_supportedboolean required

authorization_response_iss_parameter_supportedboolean required

Changes

No recorded changes to this operation across all 1 revision of this API.