ServicesAuthenticationHTTP APIServer metadata

Get the authorization server metadata

GET
/.well-known/oauth-authorization-server

The authorization server metadata (RFC 8414 §3). The same document is published at /.well-known/openid-configuration as OpenID Connect Discovery provider metadata (OpenID Connect Discovery 1.0 §4).

Response Body

The authorization server metadata.

application/json
  1. response

Authorization server metadata (RFC 8414 §2, OpenID Connect Discovery 1.0 §3).

issuer*string
jwks_uri*string
Formaturi
authorization_endpoint*string
Formaturi
token_endpoint*string
Formaturi
device_authorization_endpoint*string
Formaturi
revocation_endpoint*string
Formaturi
userinfo_endpoint*string
Formaturi
scopes_supported*array<string>
subject_types_supported*array<string>
id_token_signing_alg_values_supported*array<string>
claims_supported*array<string>
authorization_details_types_supported*array<string>
response_types_supported*array<string>
grant_types_supported*array<string>
code_challenge_methods_supported*array<string>
token_endpoint_auth_methods_supported*array<string>
token_endpoint_auth_signing_alg_values_supported?array<string>

Present when private_key_jwt is supported.

revocation_endpoint_auth_methods_supported*array<string>
revocation_endpoint_auth_signing_alg_values_supported?array<string>

Present when the revocation endpoint supports private_key_jwt.

client_id_metadata_document_supported?boolean

Present, and true, when the server accepts Client ID Metadata Documents.

authorization_response_iss_parameter_supported*boolean
curl -X GET 'https://auth.spiraldb.com/.well-known/oauth-authorization-server'
{  "issuer": "https://auth.spiraldb.com",  "jwks_uri": "http://example.com",  "authorization_endpoint": "http://example.com",  "token_endpoint": "http://example.com",  "device_authorization_endpoint": "http://example.com",  "revocation_endpoint": "http://example.com",  "userinfo_endpoint": "http://example.com",  "scopes_supported": [    "openid",    "profile",    "email",    "projects:read",    "catalog:read",    "tables:read"  ],  "subject_types_supported": [    "public"  ],  "id_token_signing_alg_values_supported": [    "RS256"  ],  "claims_supported": [    "string"  ],  "authorization_details_types_supported": [    "spiral:storage"  ],  "response_types_supported": [    "code"  ],  "grant_types_supported": [    "string"  ],  "code_challenge_methods_supported": [    "S256"  ],  "token_endpoint_auth_methods_supported": [    "none",    "private_key_jwt"  ],  "token_endpoint_auth_signing_alg_values_supported": [    "string"  ],  "revocation_endpoint_auth_methods_supported": [    "string"  ],  "revocation_endpoint_auth_signing_alg_values_supported": [    "string"  ],  "client_id_metadata_document_supported": true,  "authorization_response_iss_parameter_supported": true}