type: object
description: |
    RFC 8414 OAuth 2.0 authorization-server metadata document. Returned
    from `/.well-known/oauth-authorization-server`.
required: [issuer]
properties:
    issuer: { type: string, format: uri }
    token_endpoint: { type: string, format: uri }
    jwks_uri: { type: string, format: uri }
    authorization_endpoint: { type: string, format: uri }
    grant_types_supported:
        type: array
        items: { type: string }
        example: [authorization_code, refresh_token]
    response_types_supported:
        type: array
        items: { type: string }
    token_endpoint_auth_methods_supported:
        type: array
        items: { type: string }
        example: [client_secret_post, client_secret_basic]
    scopes_supported:
        type: array
        items: { type: string }
    id_token_signing_alg_values_supported:
        type: array
        items: { type: string }
        example: [RS256]
example:
    issuer: "https://api.bigscreenvr.com"
    token_endpoint: "https://api.bigscreenvr.com/oauth/token"
    jwks_uri: "https://api.bigscreenvr.com/.well-known/jwks.json"
    grant_types_supported: [authorization_code, refresh_token]
    response_types_supported: [code]
    token_endpoint_auth_methods_supported: [client_secret_post]
    scopes_supported: [profile, entitlements]
