{
  "resource": "https://arfat.is-a.dev",
  "authorization_servers": [
    "https://arfat.is-a.dev"
  ],
  "scopes_supported": [
    "openid",
    "profile",
    "email",
    "read",
    "write"
  ],
  "bearer_methods_supported": [
    "header"
  ],
  "issuer": "https://arfat.is-a.dev",
  "authorization_endpoint": "https://arfat.is-a.dev/api/auth/authorize",
  "token_endpoint": "https://arfat.is-a.dev/api/auth/token",
  "jwks_uri": "https://arfat.is-a.dev/.well-known/jwks.json",
  "registration_endpoint": "https://arfat.is-a.dev/api/auth/register",
  "revocation_endpoint": "https://arfat.is-a.dev/api/auth/revoke",
  "introspection_endpoint": "https://arfat.is-a.dev/api/auth/introspect",
  "response_types_supported": [
    "code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment"
  ],
  "grant_types_supported": [
    "authorization_code",
    "client_credentials",
    "refresh_token",
    "urn:ietf:params:oauth:grant-type:jwt-bearer",
    "urn:ietf:params:oauth:grant-type:token-exchange",
    "urn:workos:agent-auth:grant-type:claim"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "private_key_jwt",
    "none"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "EdDSA",
    "ES256"
  ],
  "code_challenge_methods_supported": [
    "S256",
    "plain"
  ],
  "service_documentation": "https://arfat.is-a.dev/auth.md",
  "agent_auth": {
    "skill": "https://arfat.is-a.dev/auth.md",
    "register_uri": "https://arfat.is-a.dev/api/auth/register",
    "identity_endpoint": "https://arfat.is-a.dev/api/auth/register",
    "claim_endpoint": "https://arfat.is-a.dev/api/auth/claim",
    "claim_uri": "https://arfat.is-a.dev/api/auth/claim",
    "revocation_uri": "https://arfat.is-a.dev/api/auth/revoke",
    "events_endpoint": "https://arfat.is-a.dev/api/auth/events",
    "identity_types_supported": [
      "identity_assertion",
      "anonymous",
      "service_auth"
    ],
    "identity_assertion": {
      "assertion_types_supported": [
        "urn:ietf:params:oauth:token-type:id-jag",
        "verified_email"
      ],
      "credential_types_supported": [
        "bearer_token",
        "api_key",
        "http_message_signature"
      ],
      "claim_uri": "https://arfat.is-a.dev/api/auth/claim",
      "revocation_uri": "https://arfat.is-a.dev/api/auth/revoke"
    },
    "anonymous": {
      "credential_types_supported": [
        "bearer_token",
        "ephemeral_key"
      ],
      "claim_uri": "https://arfat.is-a.dev/api/auth/claim"
    },
    "service_auth": {
      "credential_types_supported": [
        "bearer_token",
        "api_key"
      ],
      "claim_uri": "https://arfat.is-a.dev/api/auth/claim"
    },
    "events_supported": [
      "revocation",
      "https://schemas.workos.com/events/agent/auth/identity/assertion/revoked"
    ]
  }
}