MFellows · Authentication Profile

Mfellows Authentication

Authentication

MFellows secures its APIs with oauth2 and openIdConnect across 2 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode flow(s).

CompanyFintechFinancial ServicesSavingsLendingROSCAPaymentsEgyptMobileConsumer Finance
Methods: oauth2, openIdConnect Schemes: 2 OAuth flows: authorizationCode API key in:

Security Schemes

openIdConnect openIdConnect
oauth2 oauth2
· flows: authorizationCode

Source

Authentication Profile

mfellows-authentication.yml Raw ↑ 
generated: '2026-07-20'
method: searched
source: https://moneyfellows.com/.well-known/openid-configuration
docs: https://moneyfellows.com/.well-known/openid-configuration
notes: >-
  Derived from the published OpenID Connect / OAuth 2.0 discovery document on the
  moneyfellows.com domain. This authorization server is the Umbraco CMS Content
  Delivery API member-auth server that backs the website; Money Fellows publishes
  no separate developer/product API. Authorization Code flow with PKCE (S256) and
  refresh tokens; RS256-signed ID tokens.
summary:
  types:
  - oauth2
  - openIdConnect
  oauth2_flows:
  - authorizationCode
  pkce: true
  refresh_tokens: true
schemes:
- name: openIdConnect
  type: openIdConnect
  openIdConnectUrl: https://moneyfellows.com/.well-known/openid-configuration
  issuer: https://moneyfellows.com/
  sources:
  - well-known/mfellows-openid-configuration.json
- name: oauth2
  type: oauth2
  flows:
  - flow: authorizationCode
    authorizationUrl: https://moneyfellows.com/umbraco/delivery/api/v1/security/member/authorize
    tokenUrl: https://moneyfellows.com/umbraco/delivery/api/v1/security/member/token
    revocationUrl: https://moneyfellows.com/umbraco/delivery/api/v1/security/member/revoke
    endSessionUrl: https://moneyfellows.com/umbraco/delivery/api/v1/security/member/signout
    code_challenge_methods:
    - plain
    - S256
    token_endpoint_auth_methods:
    - client_secret_basic
    - client_secret_post
  sources:
  - well-known/mfellows-oauth-authorization-server.json