The OAuth Discovery specification has been updated to add metadata values for revocation, introspection, and PKCE. Changes were:
- Added “
revocation_endpoint_auth_methods_supported
” and “revocation_endpoint_auth_signing_alg_values_supported
” for the revocation endpoint. - Added “
introspection_endpoint_auth_methods_supported
” and “introspection_endpoint_auth_signing_alg_values_supported
” for the introspection endpoint. - Added “
code_challenge_methods_supported
” for PKCE.
The specification is available at:
An HTML-formatted version is also available at:
Leave a Reply
You must be logged in to post a comment.