openapi: 3.0.3
info:
  title: Spring Server Authorization Discovery API
  description: Spring Authorization Server is a framework providing implementations of OAuth 2.1 and OpenID Connect 1.0 specifications. It exposes standard protocol endpoints for token issuance, token introspection, JWKS publication, device authorization, and OpenID Connect session management.
  version: 1.3.0
  contact:
    name: Spring Security Team
    url: https://spring.io/projects/spring-authorization-server
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
servers:
- url: http://localhost:9000
  description: Default authorization server port
tags:
- name: Discovery
paths:
  /.well-known/openid-configuration:
    get:
      operationId: getOidcDiscovery
      summary: OpenID Connect Discovery
      description: Returns authorization server OIDC metadata
      tags:
      - Discovery
      responses:
        '200':
          description: OIDC configuration
          content:
            application/json:
              schema:
                type: object
  /.well-known/oauth-authorization-server:
    get:
      operationId: getOAuthMetadata
      summary: OAuth2 Server Metadata
      description: Returns RFC 8414 authorization server metadata
      tags:
      - Discovery
      responses:
        '200':
          description: Server metadata
          content:
            application/json:
              schema:
                type: object
components:
  securitySchemes:
    basicAuth:
      type: http
      scheme: basic
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT