{
  "issuer": "https://brante.dev",
  "authorization_endpoint": "https://brante.dev/oauth/authorize",
  "token_endpoint": "https://brante.dev/oauth/token",
  "jwks_uri": "https://brante.dev/.well-known/jwks.json",
  "registration_endpoint": "https://brante.dev/oauth/register",
  "response_types_supported": ["code", "token"],
  "subject_types_supported": ["public"],
  "id_token_signing_alg_values_supported": ["RS256"],
  "scopes_supported": ["openid", "profile", "email", "read:audit", "execute:wpo", "contact:send"],
  "token_endpoint_auth_methods_supported": ["client_secret_post", "client_secret_basic", "private_key_jwt"],
  "grant_types_supported": ["authorization_code", "client_credentials", "refresh_token"],
  "agent_auth": {
    "skill": "https://brante.dev/auth.md",
    "register_uri": "https://brante.dev/oauth/register",
    "supported_identity_types": ["anonymous", "identity_assertion", "agent", "human", "service"],
    "identity_types_supported": ["anonymous", "identity_assertion"],
    "supported_credential_types": ["bearer_token", "api_key"],
    "credential_types": ["bearer_token", "api_key"],
    "credential_types_supported": ["bearer_token", "api_key"],
    "anonymous": {
      "credential_types_supported": ["bearer_token", "api_key"],
      "claim_uri": "https://brante.dev/oauth/claim"
    },
    "identity_assertion": {
      "assertion_types_supported": ["urn:ietf:params:oauth:token-type:id-jag", "verified_email"],
      "credential_types_supported": ["bearer_token", "api_key"],
      "claim_uri": "https://brante.dev/oauth/claim"
    },
    "claim_uri": "https://brante.dev/oauth/claim",
    "revocation_uri": "https://brante.dev/oauth/revoke",
    "documentation_uri": "https://brante.dev/auth.md"
  }
}
