NUS OpenID Provider Metadata

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/nus/refs/heads/main/json-schema/nus-openid-configuration-schema.json",
  "title": "NUS OpenID Provider Metadata",
  "description": "Schema for the OpenID Connect discovery document published by the National University of Singapore's own identity provider at https://vafs.nus.edu.sg/adfs/.well-known/openid-configuration. Derived from the live document fetched 2026-08-19; NUS publishes no schema of its own.",
  "x-generated": "2026-08-19",
  "x-method": "derived",
  "x-source": "https://vafs.nus.edu.sg/adfs/.well-known/openid-configuration",
  "x-operator": "institution",
  "type": "object",
  "required": ["issuer", "authorization_endpoint", "token_endpoint", "jwks_uri", "response_types_supported", "subject_types_supported", "id_token_signing_alg_values_supported"],
  "additionalProperties": true,
  "properties": {
    "issuer": { "type": "string", "format": "uri", "const": "https://vafs.nus.edu.sg/adfs" },
    "authorization_endpoint": { "type": "string", "format": "uri" },
    "token_endpoint": { "type": "string", "format": "uri" },
    "jwks_uri": { "type": "string", "format": "uri" },
    "userinfo_endpoint": { "type": "string", "format": "uri" },
    "end_session_endpoint": { "type": "string", "format": "uri" },
    "device_authorization_endpoint": { "type": "string", "format": "uri" },
    "access_token_issuer": { "type": "string", "format": "uri" },
    "scopes_supported": { "type": "array", "items": { "type": "string" } },
    "response_types_supported": { "type": "array", "items": { "type": "string" } },
    "response_modes_supported": { "type": "array", "items": { "type": "string", "enum": ["query", "fragment", "form_post"] } },
    "grant_types_supported": { "type": "array", "items": { "type": "string" } },
    "subject_types_supported": { "type": "array", "items": { "type": "string", "enum": ["pairwise", "public"] } },
    "id_token_signing_alg_values_supported": { "type": "array", "items": { "type": "string" } },
    "token_endpoint_auth_methods_supported": { "type": "array", "items": { "type": "string" } },
    "token_endpoint_auth_signing_alg_values_supported": { "type": "array", "items": { "type": "string" } },
    "claims_supported": { "type": "array", "items": { "type": "string" } },
    "capabilities": { "type": "array", "items": { "type": "string" } },
    "frontchannel_logout_supported": { "type": "boolean" },
    "frontchannel_logout_session_supported": { "type": "boolean" },
    "microsoft_multi_refresh_token": { "type": "boolean" },
    "as_access_token_token_binding_supported": { "type": "boolean" },
    "as_refresh_token_token_binding_supported": { "type": "boolean" },
    "resource_access_token_token_binding_supported": { "type": "boolean" },
    "op_id_token_token_binding_supported": { "type": "boolean" },
    "rp_id_token_token_binding_supported": { "type": "boolean" }
  }
}