Spring Security

Spring Security Discovery API

The Discovery API from Spring Security — 2 operation(s) for discovery.

GitHub OpenAPI

Documentation

📖
Documentation
https://docs.spring.io/spring-security/reference/servlet/oauth2/index.html
📖
Documentation
https://docs.spring.io/spring-authorization-server/docs/current/reference/html/
📖
GettingStarted
https://docs.spring.io/spring-authorization-server/docs/current/reference/html/getting-started.html

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/spring-security/refs/heads/main/openapi/spring-security-discovery-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/spring-projects/spring-authorization-server

Other Resources

🔗
OAuth2 Client Documentation
https://docs.spring.io/spring-security/reference/servlet/oauth2/client/index.html
🔗
OAuth2 Resource Server
https://docs.spring.io/spring-security/reference/servlet/oauth2/resource-server/index.html
🔗
Authorization Server
https://spring.io/projects/spring-authorization-server

OpenAPI Specification

spring-security-discovery-api-openapi.yml Raw ↑ 
openapi: 3.0.3
info:
  title: Spring Server Authorization Discovery API
  description: Spring Authorization Server is a framework providing implementations of OAuth 2.1 and OpenID Connect 1.0 specifications. It exposes standard protocol endpoints for token issuance, token introspection, JWKS publication, device authorization, and OpenID Connect session management.
  version: 1.3.0
  contact:
    name: Spring Security Team
    url: https://spring.io/projects/spring-authorization-server
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
servers:
- url: http://localhost:9000
  description: Default authorization server port
tags:
- name: Discovery
paths:
  /.well-known/openid-configuration:
    get:
      operationId: getOidcDiscovery
      summary: OpenID Connect Discovery
      description: Returns authorization server OIDC metadata
      tags:
      - Discovery
      responses:
        '200':
          description: OIDC configuration
          content:
            application/json:
              schema:
                type: object
  /.well-known/oauth-authorization-server:
    get:
      operationId: getOAuthMetadata
      summary: OAuth2 Server Metadata
      description: Returns RFC 8414 authorization server metadata
      tags:
      - Discovery
      responses:
        '200':
          description: Server metadata
          content:
            application/json:
              schema:
                type: object
components:
  securitySchemes:
    basicAuth:
      type: http
      scheme: basic
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT