pub async fn oauth_authorization_server(
http_client: &Client,
pds: &str,
) -> Result<AuthorizationServer, OAuthClientError>
Expand description
Fetches and validates authorization server metadata from a PDS’s well-known endpoint.
Retrieves OAuth 2.0 authorization server configuration from /.well-known/oauth-authorization-server
and validates AT Protocol requirements including:
- Required grant types: authorization_code, refresh_token
- Required scopes: atproto, transition:generic
- Required security features: PKCE (S256), DPoP (ES256), PAR
- Required authentication methods: none, private_key_jwt