generated: '2026-07-18'
method: searched
source: https://api.autopass.xyz/.well-known/openid-configuration
docs: https://docs.autopass.xyz/autopass-fu-wu-shou-quan-fang-an.md
summary:
  types: [oauth2, openIdConnect]
  oauth2_flows: [authorizationCode, clientCredentials, password, refresh_token]
  api_key_in: []
issuer: https://www.autopass.xyz
schemes:
  - name: autopassOAuth
    type: oauth2
    source: https://api.autopass.xyz/.well-known/openid-configuration
    authorization_endpoint: https://api.autopass.xyz/oauth/authorize
    token_endpoint: https://api.autopass.xyz/oauth/token
    revocation_endpoint: https://api.autopass.xyz/oauth/revoke
    introspection_endpoint: https://api.autopass.xyz/oauth/introspect
    userinfo_endpoint: https://api.autopass.xyz/oauth/userinfo
    jwks_uri: https://api.autopass.xyz/oauth/discovery/keys
    grant_types: [client_credentials, password, authorization_code, refresh_token]
    response_types: [code]
    response_modes: [query, fragment, form_post]
    token_endpoint_auth_methods: [client_secret_basic, client_secret_post]
    id_token_signing_alg: [RS256]
    subject_types: [public]
  - name: autopassOIDC
    type: openIdConnect
    openIdConnectUrl: https://api.autopass.xyz/.well-known/openid-configuration
    claims_supported: [iss, sub, aud, exp, iat, email, email_verified, phone_number, phone_number_verified]
notes: >-
  OAuth 2.0 Authorization Code + Client Credentials are the primary partner flows; password
  and refresh_token grants are also advertised. OpenID Connect discovery exposes a single
  'openid' scope. Bearer access tokens are presented to the resource API at api.autopass.xyz.