Advanced Techniques

This page is about some advanced techniques and client-side endpoints.

Private JWT authentication

OAuth 2 Client can be authenticate via JWT.

Firstly the client generate private-public key pair. Private key is used to sign up the JWT. Pubic keys (JWKs) are exposed as endpoint. This endpoint is registered in OAuth 2 Client. Authorization server will use JWKs URL to verify JWT and authenticate the client.

Logo, ToS and privacy

The client may have endpoints with project/company logo, terms of service and privacy information. This endpoints can be registered in the OAuth 2 Client.

Client URL

Project's home page can be registered in the OAuth 2 Client.