Support for optional Authorization Server Metadata

jazzband / django-oauth-toolkit

OAuth2 goodies for the Djangonauts!

https://django-oauth-toolkit.readthedocs.io

Other

3.06k stars 777 forks source link

Support for optional Authorization Server Metadata #1411

Open charleswhchan opened 3 months ago

charleswhchan commented 3 months ago

According to Section 3 of OpenID Provider Metadata spec:

... Additional OpenID Provider Metadata parameters MAY also be used. ...

Is it possible to include additional Authorization Server Metadata RFC 8414 such as revocation_endpoint, revocation_endpoint_auth_methods_supported, revocation_endpoint_auth_signing_alg_values_supported, etc?

n2ygk commented 1 month ago

It's possible if you are willing to contribute a PR that implements the revocation endpoint! It would be a welcome enhancement.