Discovery Endpoint

Endpoints

GET /.well-known/openid-configuration
GET /.well-known/oauth-authorization-server

Base URL: https://api-id.avnology.net

Authentication: None required (public endpoint)

Returns the OIDC and OAuth 2.1 discovery metadata, including all endpoint URLs, supported grant types, scopes, and signing algorithms. Use this to dynamically configure your OAuth client.

Request

curl https://api-id.avnology.net/.well-known/openid-configuration

Response (200 OK)

{
  "issuer": "https://api-id.avnology.net",
  "authorization_endpoint": "https://api-id.avnology.net/oauth2/auth",
  "token_endpoint": "https://api-id.avnology.net/oauth2/token",
  "userinfo_endpoint": "https://api-id.avnology.net/userinfo",
  "revocation_endpoint": "https://api-id.avnology.net/oauth2/revoke",
  "introspection_endpoint": "https://api-id.avnology.net/oauth2/introspect",
  "jwks_uri": "https://api-id.avnology.net/.well-known/jwks.json",
  "device_authorization_endpoint"

Usage

Most OAuth/OIDC libraries accept the discovery URL for automatic configuration:

JavaScript (oidc-client-ts)

const settings = {
  authority: 'https://api-id.avnology.net',
  client_id: 'cli_abc123def456',
  redirect_uri: 'https://app.acme.com/callback',
  // The library auto-discovers all endpoints from /.well-known/openid-configuration
};

Python (authlib)

from authlib.integrations.httpx_client import AsyncOAuth2Client

client = AsyncOAuth2Client(
    client_id="cli_abc123def456",
    client_secret="cs_secret_value",
    server_metadata_url="https://api-id.avnology.net/.well-known/openid-configuration",

JWKS -- public keys for JWT verification
Authorization Endpoint -- start the OAuth flow