GET
/.well-known/openid-configuration
Discovery
Summary
OpenID Provider Metadata for this authorization server. Use it to discover issuer, endpoints, supported scopes, grants, and PKCE methods.
Auth
None (public).
Parameters
None.
Example request
GET /.well-known/openid-configuration HTTP/1.1
Host: <issuer-host>Success
JSON metadata including issuer, authorization_endpoint (/authorize), token_endpoint (/token), userinfo_endpoint (/userinfo), jwks_uri (/jwks.json), revocation_endpoint (/revoke), response_types_supported ["code"], code_challenge_methods_supported ["S256"], scopes_supported (openid, profile, email, phone, offline_access), grant_types_supported (authorization_code, refresh_token), token_endpoint_auth_methods_supported (client_secret_post, none), and id_token_signing_alg_values_supported [RS256].
Errors
| Code | Description |
|---|---|
5xx |
Standard HTTP errors only; this endpoint is read-only metadata. |
Notes
- Do not hardcode endpoints — read discovery from the issuer URL.
- Token exchange (/oauth/token-exchange) is AS-internal only and omitted from public docs.