generated: '2026-07-18'
method: derived
source: well-known/better-openid-configuration.json
standards:
- id: oauth2
  conforms: true
  evidence: better.com publishes OAuth 2.0 authorization-server endpoints (authorization, token, revocation, registration).
- id: oidc
  conforms: true
  evidence: /.well-known/openid-configuration discovery document present with RS256 id_token signing and userinfo endpoint.
- id: pkce-rfc7636
  conforms: true
  evidence: code_challenge_methods_supported includes S256.
- id: rfc8414-oauth-authorization-server
  conforms: false
  evidence: /.well-known/oauth-authorization-server returned 404.
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returned 404.