Retrieve authorization server metadata

Request

OAuth2 authorization server metadata (RFC 8414). Lists the authorization, token, registration, and revocation endpoints along with the supported scopes, grant types, client authentication methods, and PKCE code challenge methods. Clients can discover the server's capabilities instead of hard-coding them.

curl -i -X GET \
  https://cafe.redocly.com/_mock/openapi/cafe/.well-known/oauth-authorization-server

Responses

Authorization server metadata.

Bodyapplication/json

issuerstring, (uri)required

The authorization server's issuer identifier.

authorization_endpointstring, (uri)required

token_endpointstring, (uri)required

registration_endpointstring, (uri)

Dynamic client registration endpoint (RFC 7591).

revocation_endpointstring, (uri)

Token revocation endpoint (RFC 7009).

scopes_supportedArray of strings

response_types_supportedArray of stringsrequired

response_modes_supportedArray of strings

grant_types_supportedArray of strings

token_endpoint_auth_methods_supportedArray of strings

revocation_endpoint_auth_methods_supportedArray of strings

code_challenge_methods_supportedArray of strings

PKCE code challenge methods supported (RFC 7636).

authorization_response_iss_parameter_supportedboolean

Whether authorization responses carry the iss parameter (RFC 9207).

service_documentationstring, (uri)

Response

{
  "issuer": "https://api.cafe.redocly.com",
  "authorization_endpoint": "https://api.cafe.redocly.com/oauth2/authorize",
  "token_endpoint": "https://api.cafe.redocly.com/oauth2/token",
  "registration_endpoint": "https://api.cafe.redocly.com/oauth2/register",
  "revocation_endpoint": "https://api.cafe.redocly.com/oauth2/revoke",
  "scopes_supported": [
    "menu:read",
    "menu:write",
    "orders:read",
    "orders:write",
    "revenue:read"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query"
  ],
  "grant_types_supported": [
    "authorization_code",
    "client_credentials",
    "refresh_token"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post"
  ],
  "revocation_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post"
  ],
  "code_challenge_methods_supported": [
    "S256",
    "plain"
  ],
  "authorization_response_iss_parameter_supported": true,
  "service_documentation": "https://cafe.redocly.com/openapi/cafe"
}