Component schema

OAuthAuthorizationServerMetadata

object1 direct reference

Definition

stringrequired

The authorization server's issuer identifier (URL).

stringrequired

URL of the authorization endpoint.

stringrequired

URL of the token endpoint.

string

URL of the dynamic client registration endpoint.

string

URL of the token revocation endpoint.

string

URL of the token introspection endpoint.

string[]

List of scopes supported by the authorization server.

OAuthResponseType[]required

List of supported response types.

OAuthGrantType[]

List of supported grant types.

OAuthCodeChallengeMethod[]

List of supported PKCE code challenge methods.

OAuthTokenEndpointAuthMethod[]

List of supported token endpoint authentication methods.

string

URL of the UserInfo endpoint (OIDC Core § 5.3).

Used by 1

These schemas and endpoints reference this type directly.

EndpointGET /.well-known/oauth-authorization-server

json

OpenAPI source1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980
{
  "properties": {
    "issuer": {
      "description": "The authorization server's issuer identifier (URL).",
      "type": "string",
      "format": "uri"
    },
    "authorization_endpoint": {
      "description": "URL of the authorization endpoint.",
      "type": "string",
      "format": "uri"
    },
    "token_endpoint": {
      "description": "URL of the token endpoint.",
      "type": "string",
      "format": "uri"
    },
    "registration_endpoint": {
      "description": "URL of the dynamic client registration endpoint.",
      "type": "string",
      "format": "uri"
    },
    "revocation_endpoint": {
      "description": "URL of the token revocation endpoint.",
      "type": "string",
      "format": "uri"
    },
    "introspection_endpoint": {
      "description": "URL of the token introspection endpoint.",
      "type": "string",
      "format": "uri"
    },
    "scopes_supported": {
      "description": "List of scopes supported by the authorization server.",
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "response_types_supported": {
      "description": "List of supported response types.",
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/OAuthResponseType"
      }
    },
    "grant_types_supported": {
      "description": "List of supported grant types.",
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/OAuthGrantType"
      }
    },
    "code_challenge_methods_supported": {
      "description": "List of supported PKCE code challenge methods.",
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/OAuthCodeChallengeMethod"
      }
    },
    "token_endpoint_auth_methods_supported": {
      "description": "List of supported token endpoint authentication methods.",
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
      }
    },
    "userinfo_endpoint": {
      "description": "URL of the UserInfo endpoint (OIDC Core § 5.3).",
      "type": "string",
      "format": "uri"
    }
  },
  "required": [
    "issuer",
    "authorization_endpoint",
    "token_endpoint",
    "response_types_supported"
  ]
}