Authorization Server Metadata

• RFC

The authorization server metadata endpoint exposes information about services, features and endpoints supported by the authorization server.

Who is it for

Authorization servers which want to enable service discovery.

How to enable it

You must enable the endpoint at the root level of your router:

# inside the roda router

route do |r|
  r.rodauth
  r.load_oauth_server_metadata_route
  # expose GET /.well-known/oauth-authorization-server
  #
  # if you have multiple configurations, you can do:
  # r.load_oauth_server_metadata_route("issuer1")
  # matches GET /.well-known/oauth-authorization-server/issuer1
  ...

Home