Discover the authorization server

Example request

curl --request GET 'https://commitscale.com/.well-known/oauth-authorization-server'

Example values illustrate the format. Use your own credentials and identifiers.

Responses

200 OAuth authorization server metadata.

application/json

{
  "authorization_endpoint": "example",
  "authorization_response_iss_parameter_supported": false,
  "client_id_metadata_document_supported": false,
  "code_challenge_methods_supported": [
    "example"
  ],
  "grant_types_supported": [
    "example"
  ],
  "issuer": "example",
  "registration_endpoint": "example",
  "response_modes_supported": [
    "example"
  ],
  "response_types_supported": [
    "example"
  ],
  "revocation_endpoint": "example",
  "revocation_endpoint_auth_methods_supported": [
    "example"
  ],
  "scopes_supported": [
    "example"
  ],
  "token_endpoint": "example",
  "token_endpoint_auth_methods_supported": [
    "example"
  ]
}

authorization_endpointrequired · string

Where a client begins authorization.

authorization_response_iss_parameter_supportedrequired · boolean

Whether authorization responses include the issuer.

client_id_metadata_document_supportedrequired · boolean

Whether client identifiers may be metadata document URLs.

code_challenge_methods_supportedrequired · array of string

Supported PKCE challenge methods.

Fields of code_challenge_methods_supported

Supported PKCE challenge methods.

Each item has this shape.

grant_types_supportedrequired · array of string

Supported OAuth grant types.

Fields of grant_types_supported

Supported OAuth grant types.

Each item has this shape.

issuerrequired · string

The authorization server's issuer URL.

registration_endpointrequired · string

Where a public client registers its redirects.

response_modes_supportedrequired · array of string

Supported authorization response modes.

Fields of response_modes_supported

Supported authorization response modes.

Each item has this shape.

response_types_supportedrequired · array of string

Supported authorization response types.

Fields of response_types_supported

Supported authorization response types.

Each item has this shape.

revocation_endpointrequired · string

Where a client revokes a token.

revocation_endpoint_auth_methods_supportedrequired · array of string

Supported client authentication at the revocation endpoint.

Fields of revocation_endpoint_auth_methods_supported

Supported client authentication at the revocation endpoint.

Each item has this shape.

scopes_supportedrequired · array of string

Supported scope names.

Fields of scopes_supported

Supported scope names.

Each item has this shape.

token_endpointrequired · string

Where a client exchanges or refreshes a token.

token_endpoint_auth_methods_supportedrequired · array of string

Supported client authentication at the token endpoint.

Fields of token_endpoint_auth_methods_supported

Supported client authentication at the token endpoint.

Each item has this shape.

RateLimit and RateLimit-Policy describe the request rate. Follow Retry-After when a response asks you to wait.

Problem responses

Errors use application/problem+json. Act on the stable code, and follow next when present. See the problem format.

quota_exceeded429

With 429, the caller used its requests for the minute. With 422, a count limit was reached.

With 429, wait Retry-After seconds and retry. With 422, remove one first.