Laundryheap OAuth 2.0 / OpenID Connect Authorization Server
A live, spec-clean OAuth 2.0 and OpenID Connect provider on Laundryheap's root host, discovered only by probing /.well-known/. It advertises the authorization_code (with PKCE) and client_credentials grants, RS256 ID tokens, RFC 7662 introspection, RFC 7009 revocation and open RFC 7591 dynamic client registration, and it declares a single business scope, `orders.create` — the only public evidence anywhere that Laundryheap intends third parties to place orders programmatically. No documentation for it exists.