Sign in
oauth2
metadata

Get OAuth 2.0 Protected Resource Metadata

Returns metadata about this OAuth 2.0 protected resource as defined in RFC 9728. This endpoint provides information about supported scopes, authorization servers, and other resource capabilities.

get/.well-known/oauth-protected-resource

Response

OAuth 2.0 Protected Resource Metadata

authorization_details_types_supportedstring[]

Array containing authorization details type values supported by the resource server when the authorization_details request parameter is used

authorization_serversstring[]

Array containing authorization server issuer identification URIs

bearer_methods_supportedstring[]

Array containing methods supported for presenting bearer tokens

dpop_bound_access_tokens_requiredboolean

Boolean value specifying whether the protected resource always requires the use of DPoP-bound access tokens

dpop_signing_alg_values_supportedstring[]

Array containing JWS alg values supported by the resource server for validating DPoP proof JWTs

jwks_uristring uri

URL of the protected resource's JSON Web Key (JWK) Set document. This contains public keys belonging to the protected resource

resourcestring uri required

URL of the resource server

resource_documentationstring uri

URL for human-readable documentation for the resource server

resource_namestring

Human-readable name of the protected resource intended for display to the end user

resource_policy_uristring uri

URL for the resource server's policy document

resource_signing_alg_values_supportedstring[]

Array containing JWS signing algorithms supported by the protected resource for signing resource responses

resource_tos_uristring uri

URL for the resource server's terms of service

scopes_supportedstring[]

Array containing OAuth 2.0 scope strings that the resource server can accept in access tokens

signed_metadatastring

Signed JWT containing metadata parameters about the protected resource as claims

tls_client_certificate_bound_access_tokensboolean

Boolean value indicating protected resource support for mutual-TLS client certificate-bound access tokens