VersolaVersola/docs
versola.kzGitHub
RUEN

RFC 8414 — Authorization Server Metadata

OAuth 2.0 Authorization Server Metadata (Discovery) — not yet implemented

Specification: RFC 8414

Authorization Server Metadata allows clients to discover an authorization server’s capabilities and endpoint URLs automatically, without requiring manual configuration.

Status: Not Yet Implemented

The /.well-known/oauth-authorization-server discovery endpoint is not yet implemented.

Planned Endpoint

  • GET /.well-known/oauth-authorization-server
  • GET /.well-known/openid-configuration (OIDC-compatible alias)

Planned Metadata Fields

Required:

  • issuer — authorization server identifier
  • authorization_endpoint — URL of the authorization endpoint
  • token_endpoint — URL of the token endpoint

Recommended:

  • jwks_uri — URL of the JWKS endpoint
  • response_types_supported — list of supported response_type values
  • grant_types_supported — list of supported grant types
  • token_endpoint_auth_methods_supported
  • revocation_endpoint — URL of the revocation endpoint
  • introspection_endpoint — URL of the introspection endpoint
  • scopes_supported — list of supported scope values
  • code_challenge_methods_supported — ["S256", "plain"]

OIDC Extensions (OpenID Connect Discovery):

  • userinfo_endpoint
  • id_token_signing_alg_values_supported
  • claims_supported
  • subject_types_supported