OAuth Authorization Server Metadata (OIDC app)
GET/service/oidc/:OIDCAppName/.well-known/oauth-authorization-server
Returns OAuth 2.0 Authorization Server Metadata (RFC 8414) for the given OIDC app. Use this endpoint for OAuth 2.0 client discovery when using the OIDC flow path. Response does not include OpenID Connect-specific fields (e.g. userinfo_endpoint, claims_supported).
Request
Responses
- 200
- 400
- 403
- 429
OK: The request was successful.
Bad Request
Forbidden
Too Many Requests: The client has sent too many requests in a given amount of time.
Response Headers
X-RateLimit-Limit
Refill rate of the bucket that rejected this request: requests per second for the tenant bucket, or requests per refill window (60 seconds by default) for the per-IP bucket.
Example:
100X-RateLimit-Remaining
Tokens left in that bucket.
Example:
0X-RateLimit-Reset
Unix timestamp, in seconds, at which the next token becomes available. This is the earliest time a retry can succeed.
Example:
1757942400