generated: '2026-07-20'
method: searched
source: https://auth.leantech.me/.well-known/oauth-authorization-server, https://leantech.me/uae/en/security, openapi/
standards:
  - id: oauth2
    conforms: true
    evidence: Client-credentials + authorization-code flows; auth.leantech.me authorization server
  - id: oidc
    conforms: true
    evidence: openid-configuration published; userinfo + end_session endpoints
  - id: fapi2
    conforms: true
    evidence: PAR, DPoP (RS/PS/ES families), mTLS client auth, certificate-bound access tokens, PKCE S256
  - id: oauth2-par
    conforms: true
    evidence: pushed_authorization_request_endpoint advertised
  - id: oauth2-dpop
    conforms: true
    evidence: dpop_signing_alg_values_supported advertised
  - id: oauth2-mtls
    conforms: true
    evidence: tls_client_auth + self_signed_tls_client_auth; tls_client_certificate_bound_access_tokens=true
  - id: oauth2-token-exchange
    conforms: true
    evidence: urn:ietf:params:oauth:grant-type:token-exchange advertised
  - id: uae-open-finance
    conforms: true
    evidence: Built to UAE Open Finance (CBUAE) framework; In-Principle Approval for Open Finance Services
  - id: ksa-open-banking
    conforms: true
    evidence: KSA Open Banking APIs (SAMA framework) published (KSA specs)
  - id: soc2-type-ii
    conforms: true
    evidence: AICPA SOC 2 Type II certification (security.leantech.me)
  - id: iso-27001
    conforms: true
    evidence: ISO/IEC 27001:2022 certification (security.leantech.me)
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use code/message envelope, not application/problem+json