Well Known

OAuth 2.0 discovery endpoints (JWKS and Authorization Server Metadata)

/.well-known/jwks.json

get

Returns the JSON Web Key Set (JWKS) containing public keys used to verify JWT tokens issued by Archera. This endpoint follows the RFC 7517 standard for JWK and is used by clients to validate JWT signatures. No authentication is required as this endpoint provides public cryptographic keys.

Responses

200

OK

application/json

400

Bad request

application/json

401

Unauthorized

application/json

403

Forbidden

application/json

404

Not found

application/json

405

Method not allowed

application/json

409

Conflict

application/json

500

Failed to load keys

default

Default error response

application/json

get/.well-known/jwks.json

GET /.well-known/jwks.json HTTP/1.1
Accept: */*

{
  "keys": [
    {
      "kty": "text",
      "use": "text",
      "kid": "text",
      "alg": "text",
      "n": "text",
      "e": "text"
    }
  ]
}

/.well-known/oauth-authorization-server

get

Returns OAuth 2.0 Authorization Server Metadata as specified in RFC 8414. This endpoint provides automatic discovery of the authorization server's configuration, including supported endpoints, grant types, response types, PKCE methods, and available scopes. OAuth client libraries can use this endpoint to automatically configure themselves without manual endpoint configuration. No authentication is required as this is a public discovery endpoint.

Responses

200

OK

application/json

issuerstringRequired

The authorization server's issuer identifier URL

authorization_endpointstringRequired

URL of the OAuth 2.0 authorization endpoint

token_endpointstringRequired

URL of the OAuth 2.0 token endpoint

revocation_endpointstringRequired

URL of the OAuth 2.0 token revocation endpoint (RFC 7009)

registration_endpointstringRequired

URL of the OAuth 2.0 dynamic client registration endpoint (RFC 7591)

jwks_uristringRequired

URL of the JSON Web Key Set document

response_types_supportedstring[]Required

OAuth 2.0 response_type values supported

grant_types_supportedstring[]Required

OAuth 2.0 grant type values supported

code_challenge_methods_supportedstring[]Required

PKCE code challenge methods supported

token_endpoint_auth_methods_supportedstring[]Required

Client authentication methods supported at token endpoint

scopes_supportedstring[]Required

OAuth 2.0 scope values supported

service_documentationstringOptional

URL of service documentation for developers

400

Bad request

application/json

401

Unauthorized

application/json

403

Forbidden

application/json

404

Not found

application/json

405

Method not allowed

application/json

409

Conflict

application/json

500

Internal server error

application/json

default

Default error response

application/json

get/.well-known/oauth-authorization-server

GET /.well-known/oauth-authorization-server HTTP/1.1
Accept: */*

{
  "issuer": "text",
  "authorization_endpoint": "text",
  "token_endpoint": "text",
  "revocation_endpoint": "text",
  "registration_endpoint": "text",
  "jwks_uri": "text",
  "response_types_supported": [
    "text"
  ],
  "grant_types_supported": [
    "text"
  ],
  "code_challenge_methods_supported": [
    "text"
  ],
  "token_endpoint_auth_methods_supported": [
    "text"
  ],
  "scopes_supported": [
    "text"
  ],
  "service_documentation": "text"
}