H&R Block Identity (OAuth 2.0 / OpenID Connect)
H&R Block's customer identity platform, a PingFederate authorization server at https://login.hrblock.com serving OpenID Connect discovery and RFC 8414 OAuth 2.0 authorization-server metadata anonymously (both HTTP 200). It advertises PKCE S256, Pushed Authorization Requests, DPoP, mutual-TLS client authentication, dynamic client registration, token introspection and revocation, the device grant, token exchange and CIBA, plus the proprietary hrbGuaid and hrbUcid scopes. This is the only machine-readable contract H&R Block publishes on the open internet.