API referenceOauth
OAuth authorization server metadata
RFC 8414 authorization server metadata. Lists every client authentication method this deployment supports.
Cette page n'est pas encore offerte en français; elle est affichée en anglais.
RFC 8414 authorization server metadata. Lists every client authentication method this deployment supports.
Response Body
application/json
curl -X GET "https://example.com/.well-known/oauth-authorization-server"{ "grant_types_supported": [ "string" ], "issuer": "string", "jwks_uri": "string", "mtls_endpoint_aliases": { "token_endpoint": "string" }, "revocation_endpoint": "string", "scopes_supported": [ "string" ], "service_documentation": "string", "token_endpoint": "string", "token_endpoint_auth_methods_supported": [ "string" ], "token_endpoint_auth_signing_alg_values_supported": [ "string" ]}Cette page vous a-t-elle été utile?
Get an access token POST
Issues a short-lived (≤ 300 s) ES256 access token (RFC 9068). Cache it and refresh 30 s before `expires_in`. Errors use RFC 6749 bodies; failed client authentication is rate-limited per (client id, source address).
Token signing keys GET
Public keys of the access-token signing keys (ES256). Two keys are published during a rotation.