OAuth 2.0 Authorization Server Metadata (RFC 8414 path-inserted)

Same document as /.well-known/oauth-authorization-server. The advertised issuer is ${APP_URL}/api/auth, so RFC 8414 path-aware clients insert the issuer path after .well-known and request the metadata document here.

curl -X GET "https://your-instance/.well-known/oauth-authorization-server/api/auth"