Interface: ResourceServer

April 27, 2026 · View on GitHub

💗 Help the project

Support from the community to continue maintaining and improving this module is welcome. If you find the module useful, please consider supporting the project by becoming a sponsor.

Protected Resource Server Metadata

See

IANA OAuth Protected Resource Server Metadata registry

Indexable

[metadata: string]: JsonValue | undefined

Properties

resource

• readonly resource: string

Resource server's Resource Identifier URL.

authorization_details_types_supported?

• readonly optional authorization_details_types_supported?: string[]

JSON array containing a list of the authorization details type values supported by the resource server when the authorization_details request parameter is used

authorization_servers?

• readonly optional authorization_servers?: string[]

JSON array containing a list of OAuth authorization server issuer identifiers

bearer_methods_supported?

• readonly optional bearer_methods_supported?: string[]

JSON array containing a list of the OAuth 2.0 Bearer Token presentation methods that this protected resource supports

dpop_bound_access_tokens_required?

• readonly optional dpop_bound_access_tokens_required?: boolean

Boolean value specifying whether the protected resource always requires the use of DPoP-bound access tokens

dpop_signing_alg_values_supported?

• readonly optional dpop_signing_alg_values_supported?: string[]

JSON array containing a list of the JWS alg values supported by the resource server for validating DPoP proof JWTs

jwks_uri?

• readonly optional jwks_uri?: string

URL of the protected resource's JWK Set document

resource_documentation?

• readonly optional resource_documentation?: string

URL of a page containing human-readable information that developers might want or need to know when using the protected resource

resource_name?

• readonly optional resource_name?: string

Human-readable name of the protected resource

resource_policy_uri?

• readonly optional resource_policy_uri?: string

URL of a page containing human-readable information about the protected resource's requirements on how the client can use the data provided by the protected resource

resource_signing_alg_values_supported?

• readonly optional resource_signing_alg_values_supported?: string[]

JSON array containing a list of the JWS signing algorithms (alg values) supported by the protected resource for signed content

resource_tos_uri?

• readonly optional resource_tos_uri?: string

URL of a page containing human-readable information about the protected resource's terms of service

scopes_supported?

• readonly optional scopes_supported?: string[]

JSON array containing a list of the OAuth 2.0 scope values that are used in authorization requests to request access to this protected resource

signed_metadata?

• readonly optional signed_metadata?: string

Signed JWT containing metadata parameters about the protected resource as claims

tls_client_certificate_bound_access_tokens?

• readonly optional tls_client_certificate_bound_access_tokens?: boolean

Boolean value indicating protected resource support for mutual-TLS client certificate-bound access tokens