generated: '2026-07-21'
method: derived
source: well-known/terralayr-openid-configuration.json
standards:
- id: oauth2
  conforms: true
  evidence: >-
    /.well-known/oauth-authorization-server (RFC 8414) advertises authorization_code
    and refresh_token grants with client_secret_basic/client_secret_post auth.
- id: oidc
  conforms: true
  evidence: >-
    /.well-known/openid-configuration advertises an OpenID Provider (issuer,
    id_token RS256, code response type).
- id: pkce-rfc7636
  conforms: true
  evidence: code_challenge_methods_supported includes S256.
- id: rfc8414-oauth-metadata
  conforms: true
  evidence: OAuth 2.0 Authorization Server Metadata document served at the well-known path.