Server metadata file

config.sample.toml

@@ -5,6 +5,9 @@ NAME = "MyDomain"
 # If unset, language is detected
 LANGUAGE = "en"
 
+# Path to the RFC8414 metadata file
+OAUTH2_METADATA_FILE = "oauth-authorization-server"
+
 [LDAP]
 URI = "ldap://ldap"
 ROOT_DN = "dc=mydomain,dc=tld"

oauth-authorization-server

@@ -0,0 +1,29 @@
+{
+  "issuer":
+    "https://mydomain.tld",
+  "authorization_endpoint":
+    "https://mydomain.tld/oauth/authorize",
+  "token_endpoint":
+    "https://mydomain.tld/oauth/token",
+  "token_endpoint_auth_methods_supported":
+    ["client_secret_basic", "private_key_jwt",
+     "client_secret_post", "none"],
+  "token_endpoint_auth_signing_alg_values_supported":
+    ["RS256", "ES256"],
+  "userinfo_endpoint":
+    "https://mydomain.tld/oauth/userinfo",
+  "jwks_uri":
+    "https://mydomain.tld/oauth/jwks.json",
+  "registration_endpoint":
+    "https://mydomain.tld/oauth/register",
+  "scopes_supported":
+    ["openid", "profile", "email", "address",
+     "phone"],
+  "response_types_supported":
+    ["code", "token", "id_token", "code token",
+     "code id_token", "token id_token"],
+  "service_documentation":
+    "http://mydomain.tld/documentation.html",
+  "ui_locales_supported":
+    ["en-US", "en-GB", "en-CA", "fr-FR", "fr-CA"]
+}