oauth2.dev

authorization_details_types_supported

IETF

Registry Context

This metadata value advertises the authorization details types that an authorization server supports for Rich Authorization Requests.

Technical Summary

authorization_details_types_supported is an OAuth authorization server metadata parameter defined by RFC 9396. Its value is a JSON array of supported authorization details type identifiers.

When Used

Included in an RFC 8414 authorization server metadata response to advertise support for Rich Authorization Requests and the supported authorization details types.

Normative Requirements

Authorization servers

MUST
1

  1. RFC 8414 - Section 3.2

    omit authorization_details_types_supported from the metadata response when it would contain zero elements.

    Condition: the supported authorization details types array would be empty

    Claims with zero elements MUST be omitted from the response.

Validation Guidance

error

If authorization_details_types_supported is present, verify that it is a non-empty JSON array.

error

Verify that authorization_details_types_supported is represented as a JSON array.

Reference

RFC9396 - Section 10

Details

Entry Id
authorization_details_types_supported
Metadata Name
authorization_details_types_supported
Metadata Description
JSON array containing the authorization details types the AS supports
Change Controller
IETF
Reference
RFC9396 - Section 10