{
    "issuer": "https://git.tu-berlin.de",
    "authorization_endpoint": "https://git.tu-berlin.de/oauth/authorize",
    "token_endpoint": "https://git.tu-berlin.de/oauth/token",
    "revocation_endpoint": "https://git.tu-berlin.de/oauth/revoke",
    "introspection_endpoint": "https://git.tu-berlin.de/oauth/introspect",
    "userinfo_endpoint": "https://git.tu-berlin.de/oauth/userinfo",
    "jwks_uri": "https://git.tu-berlin.de/oauth/discovery/keys",
    "scopes_supported": [
        "api",
        "read_api",
        "read_user",
        "create_runner",
        "manage_runner",
        "k8s_proxy",
        "self_rotate",
        "mcp",
        "mcp_orbit",
        "read_repository",
        "write_repository",
        "read_registry",
        "write_registry",
        "read_virtual_registry",
        "write_virtual_registry",
        "read_observability",
        "write_observability",
        "ai_features",
        "sudo",
        "admin_mode",
        "read_service_ping",
        "openid",
        "profile",
        "email",
        "ai_workflows",
        "user:*"
    ],
    "response_types_supported": [
        "code"
    ],
    "response_modes_supported": [
        "query",
        "fragment",
        "form_post"
    ],
    "grant_types_supported": [
        "authorization_code",
        "client_credentials",
        "device_code",
        "refresh_token"
    ],
    "token_endpoint_auth_methods_supported": [
        "client_secret_basic",
        "client_secret_post"
    ],
    "subject_types_supported": [
        "public"
    ],
    "id_token_signing_alg_values_supported": [
        "RS256"
    ],
    "claim_types_supported": [
        "normal"
    ],
    "claims_supported": [
        "iss",
        "sub",
        "aud",
        "exp",
        "iat",
        "sub_legacy",
        "name",
        "nickname",
        "preferred_username",
        "given_name",
        "family_name",
        "email",
        "email_verified",
        "website",
        "profile",
        "picture",
        "groups",
        "groups_direct",
        "https://gitlab.org/claims/groups/owner",
        "https://gitlab.org/claims/groups/maintainer",
        "https://gitlab.org/claims/groups/developer",
        "project_path",
        "ci_config_ref_uri",
        "ref_path",
        "sha",
        "environment",
        "jti"
    ],
    "code_challenge_methods_supported": [
        "plain",
        "S256"
    ]
}