# OAuth well-known configuration

**Base URL:** `https://{tenant}.{region}.qlikcloud.com`

Returns OAuth 2.0 metadata related to your tenant. Clients can use this information to programmatically configure their interactions with Qlik Cloud.

## Table of Contents

| Method | Path | Description |
|--------|------|-------------|
| `GET` | [`/.well-known/oauth-authorization-server`](#get-well-knownoauth-authorization-server) | Returns authorization server metadata. |

## API Reference

### GET /.well-known/oauth-authorization-server

Returns authorization server metadata.

- **Rate Limit:** Tier 1 (1000 requests per minute)

#### Responses

##### 200

Returns authorization server metadata.

**Content-Type:** `application/json`

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `issuer` | string | No | The issuer of the tokens. |
| `jwks_uri` | string | No | The public keys endpoint. |
| `token_endpoint` | string | No | The token endpoint. |
| `revocation_endpoint` | string | No | The token endpoint. |
| `grant_types_supported` | array | No | List of supported grant types. |
| `authorization_endpoint` | string | No | The authorization endpoint. |
| `response_types_supported` | array | No | List of supported authorization code responses. |

#### Examples

**JavaScript:**

```javascript
// qlik-api has not implemented support for `GET /.well-known/oauth-authorization-server` yet.
// In the meantime, you can use fetch like this:

const response = await fetch(
  '/.well-known/oauth-authorization-server',
  {
    method: 'GET',
    headers: {
      'Content-Type': 'application/json',
    },
  },
)

```

**Qlik CLI:**

```bash
# qlik-cli has not implemented support for GET /.well-known/oauth-authorization-server yet.
```

**cURL:**

```bash
curl "https://{tenant}.{region}.qlikcloud.com/.well-known/oauth-authorization-server"
```

**Example Response:**

```json
{
  "issuer": "https://your-tenant.us.qlikcloud.com",
  "jwks_uri": "https://your-tenant.us.qlikcloud.com/.well-known/jwks.json",
  "token_endpoint": "https://your-tenant.us.qlikcloud.com/oauth/token",
  "revocation_endpoint": "https://your-tenant.us.qlikcloud.com/oauth/revoke",
  "grant_types_supported": [],
  "authorization_endpoint": "https://your-tenant.us.qlikcloud.com/oauth/authorize",
  "response_types_supported": []
}
```

---