{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/pricklymails-com/json-schema/pricklymails-com-authorization-server-metadata-response-schema.json",
  "title": "AuthorizationServerMetadataResponse",
  "description": "`GET /.well-known/oauth-authorization-server` response body (RFC 8414 subset).",
  "x-generated": "2026-10-31",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/pricklymails-com-openapi.json#/components/schemas/AuthorizationServerMetadataResponse",
  "type": "object",
  "required": [
    "issuer",
    "authorization_endpoint",
    "token_endpoint",
    "registration_endpoint",
    "scopes_supported",
    "response_types_supported",
    "grant_types_supported",
    "code_challenge_methods_supported",
    "token_endpoint_auth_methods_supported",
    "authorization_response_iss_parameter_supported"
  ],
  "properties": {
    "authorization_endpoint": {
      "type": "string",
      "description": "The authorization endpoint URL."
    },
    "authorization_response_iss_parameter_supported": {
      "type": "boolean",
      "description": "`true`: every authorization response (success and `access_denied`) carries `iss` (RFC 9207), letting a client\nthat talks to more than one authorization server verify which one a given callback actually came from."
    },
    "code_challenge_methods_supported": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Supported PKCE code challenge methods (RFC 7636)."
    },
    "grant_types_supported": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Supported OAuth `grant_type` values."
    },
    "issuer": {
      "type": "string",
      "description": "The authorization server's issuer identifier: its own public base URL."
    },
    "registration_endpoint": {
      "type": "string",
      "description": "The dynamic client registration endpoint URL (RFC 7591)."
    },
    "response_types_supported": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Supported OAuth `response_type` values."
    },
    "scopes_supported": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Scopes this server may grant to a client."
    },
    "token_endpoint": {
      "type": "string",
      "description": "The token endpoint URL."
    },
    "token_endpoint_auth_methods_supported": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Supported token endpoint authentication methods.\n`\"none\"`: every registered client is public and authenticates via PKCE, not a client secret."
    }
  }
}