generated: '2026-07-23'
method: searched
source: https://www.alterna.ca/.well-known/openid-configuration
note: >-
  Derived from the live OpenID Connect / OAuth2 authorization-server metadata the
  site publishes. This is the Umbraco CMS "Delivery API" MEMBER-authentication
  surface behind the website's member login — NOT a banking or developer API.
  Alterna publishes no first-party developer API or its own auth documentation;
  this profile records only the anonymously discoverable protocol metadata.
schemes:
- id: umbraco_member_oidc
  type: oauth2
  protocol: OpenID Connect / OAuth 2.0
  flows:
  - authorization_code
  grant_types_supported:
  - authorization_code
  - refresh_token
  response_types_supported:
  - code
  pkce:
    supported: true
    code_challenge_methods:
    - plain
    - S256
  token_endpoint_auth_methods:
  - client_secret_basic
  - client_secret_post
  id_token_signing_alg:
  - RS256
  scopes:
  - openid
  - offline_access
  issuer: https://www.alterna.ca/
  endpoints:
    authorization: https://www.alterna.ca/umbraco/delivery/api/v1/security/member/authorize
    token: https://www.alterna.ca/umbraco/delivery/api/v1/security/member/token
    end_session: https://www.alterna.ca/umbraco/delivery/api/v1/security/member/signout
    revocation: https://www.alterna.ca/umbraco/delivery/api/v1/security/member/revoke
    jwks: https://www.alterna.ca/.well-known/jwks