Skip to content

Conversation

@johnvan7
Copy link

@johnvan7 johnvan7 commented Dec 12, 2025

Overview

This PR adds support for the OAuth 2.0 Authorization Server Metadata endpoint defined in RFC 8414.
Alongside the existing OIDC discovery document, this PR exposes a dedicated well‑known endpoint for OAuth 2.0 metadata.

What this PR does / why we need it

  • Implements the endpoint /.well-known/oauth-authorization-server as specified in RFC 8414.
  • Introduces separate discovery structures for OIDC and OAuth2 to ensure correct metadata for each protocol.
  • Adds full test coverage for both discovery endpoints.

This feature enables better interoperability with systems and MCPs that rely on OAuth 2.0 Authorization Server Metadata, making Dex more compliant with modern standards and forward‑looking integrations.

Related issue:

@cardoe
Copy link
Contributor

cardoe commented Dec 12, 2025

@johnvan7 looks reasonable. Can you squash the commits into 1? At a minimum things won't compile until all the commits are together. The last one could be split off if we really wanted but practically I don't think it makes sense.

@johnvan7 johnvan7 force-pushed the feat/add-support-rfc-8414 branch from 4a21bfd to f8c9d47 Compare December 12, 2025 21:10
@johnvan7 johnvan7 force-pushed the feat/add-support-rfc-8414 branch from f8c9d47 to 9a5868e Compare December 12, 2025 21:12
@johnvan7
Copy link
Author

@cardoe Thanks for your advice, I did the squash in one commit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants