OAuth Provider Module

This module documents OpenASA runtime endpoints when OpenASA acts as an OAuth Provider.

Protocol profile

• Version: OAuth 2.0
• Supported flow: Authorization Code + PKCE (S256)
• Current token endpoint grant support: authorization_code, refresh_token

Included endpoints

• Authorize
• Token
• UserInfo
• JWKS
• Revoke

Notes

• Base URL is https://api.openasa.com/.
• GET /oauth/authorize requires a signed-in browser session.
• /oauth/token and /oauth/revoke accept JSON body and form body.
• /auth/oauth/* is a different group used for third-party login helpers.