---
title: "OAuth2 Authorization Server Metadata"
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["system"]
---

# OAuth2 Authorization Server Metadata

`GET /.well-known/oauth-authorization-server`

Returns the Authorization Server Metadata (RFC 8414). Same content as OpenID Discovery.

## Response `200`

Authorization Server Metadata

- OAuth2DiscoveryResponse
  - `issuer` string, required
  - `authorization_endpoint` string, required
  - `token_endpoint` string, required
  - `userinfo_endpoint` string
  - `jwks_uri` string, required
  - `revocation_endpoint` string
  - `introspection_endpoint` string
  - `scopes_supported` string[]
  - `response_types_supported` string[], required
  - `grant_types_supported` string[]
  - `subject_types_supported` string[]
  - `id_token_signing_alg_values_supported` string[]
  - `token_endpoint_auth_methods_supported` string[]
  - `code_challenge_methods_supported` string[]
  - `claims_supported` string[]
  - `request_parameter_supported` boolean
  - `authorization_response_iss_parameter_supported` boolean
  - `client_id_metadata_document_supported` boolean

## Other responses

- `default` — Error

---

[API](https://skmtc.net/nhost/apis/nhost-authentication-api.md) · [All operations](https://skmtc.net/nhost/apis/nhost-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nhost/nhost-authentication-api/versions/a5c0d88b55c4/schema)