Discovery

Get OAuth authorization server metadata

Get OAuth authorization server metadata. Returns JSON unless otherwise noted.

Authentication

Authorizationnot required

This endpoint is public and takes no access token.

Responses

200Successful response

400The request is invalid

429Rate limit exceeded

const response = await fetch('https://api.ufw.dev/oauth2/v2.0/.well-known/oauth-authorization-server', {
  method: 'GET',
});

const data = await response.json();

Response200

{
  "issuer": "https://api.ufw.dev/oauth2/v2.0",
  "authorization_endpoint": "https://api.ufw.dev/oauth2/v2.0/authorize",
  "token_endpoint": "https://api.ufw.dev/oauth2/v2.0/token",
  "userinfo_endpoint": "https://api.ufw.dev/oauth2/v2.0/userinfo",
  "end_session_endpoint": "https://api.ufw.dev/oauth2/v2.0/logout",
  "jwks_uri": "https://api.ufw.dev/oauth2/v2.0/discovery/keys",
  "authorization_response_iss_parameter_supported": true,
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query"
  ],
  "grant_types_supported": [
    "authorization_code"
  ],
  "subject_types_supported": [
    "public"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "token_endpoint_auth_methods_supported": [
    "none",
    "client_secret_basic",
    "client_secret_post"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "claims_supported": [
    "iss",
    "sub",
    "aud",
    "exp",
    "iat",
    "nonce",
    "name",
    "email",
    "email_verified"
  ],
  "scopes_supported": [
    "openid",
    "profile",
    "email",
    "groups",
    "account.manage"
  ],
  "request_parameter_supported": false,
  "request_uri_parameter_supported": false,
  "claims_parameter_supported": false
}