Protected resource metadata for the Open API (RFC 9728)
GET
/.well-known/oauth-protected-resource/open/v1
const url = 'https://api.harperharbor.com/.well-known/oauth-protected-resource/open/v1';const options = {method: 'GET'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url https://api.harperharbor.com/.well-known/oauth-protected-resource/open/v1Tells clients which resource indicator to request and which authorization server issues tokens for /open/v1.
Responses
Section titled “Responses”Metadata.
Media typeapplication/json
object
resource
required
Always <API_BASE>/open/v1; pass it as resource in authorize/token requests.
string
authorization_servers
required
["<API_BASE>"].
Array<string>
bearer_methods_supported
required
["header"].
Array<string>
Examplegenerated
{ "resource": "example", "authorization_servers": [ "example" ], "bearer_methods_supported": [ "example" ]}