OAuth
支持的流程
- Authorization Code (PKCE)
- Device Authorization (RFC 8628)
- Refresh Token
- Client Credentials
- JWT Bearer (RFC 7523)
- SAML 2.0 Bearer (RFC 7522)
- Token Exchange (RFC 8693)
Endpoints
| Endpoint | 用途 |
|---|---|
/oauth2/authorize | 授权 |
/oauth2/token | 换取 token |
/oauth2/userinfo | 用户信息 |
/oauth2/introspect | 验证 |
/oauth2/revoke | 撤销 |
/oauth2/device_authorization | device flow |
/.well-known/openid-configuration | discovery |
/.well-known/jwks.json | 公钥 |